3 matches found
CVE-2019-7677
XSS exists in Enphase Envoy R3.. via the profileName parameter to the /home URI on TCP port 8888.
CVE-2019-7678
A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888.
CVE-2019-7676
A weak password vulnerability was discovered in Enphase Envoy R3.. . One can login via TCP port 8888 with the admin password for the admin account.