CVE-2020-25755

CVE-2020-25755 affects Enphase Envoy R3.x, D4.x (and other current devices). The issue is in the upgrade_start function (in /installer/upgrade_start), which allows remote authenticated users to execute arbitrary commands via the force parameter. Impact is described as remote command execution wit...

CVE-2020-25752

The CVE-2020-25752 entry concerns Enphase Envoy R3.x and D4.x devices with hardcoded web-panel login passwords for the installer and Enphase accounts. The passwords are derived from the MD5 hash of the username and serial number mixed with static strings, and the serial number can be retrieved by...

CVE-2023-33869

The CVE-2023-33869 entry concerns Enphase Envoy OS Command Injection affecting Envoy version D7.0.88. The authenticated vulnerability allows an attacker to execute root commands via command-injection in the device’s OS, with CVSSv3 base score 9.8 (CRITICAL) per NVD (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:...

CVE-2020-25753

The CVE-2020-25753 entry concerns Enphase Envoy R3.x and D4.x devices running v3 software. The issue arises from a default admin password set to the last 6 digits of the serial number, and the serial number is retrievable by an unauthenticated user at /info.xml. This combination creates a credent...

CVE-2020-25754

CVE-2020-25754 affects Enphase Energy Envoy R3.x and D4.x devices. A custom PAM module for user authentication bypasses standard login by deriving a password from the MD5 hash of the username and serial number, with the serial number obtainable by an unauthenticated user at /info.xml. Attempts to...