Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-hch6-3cq4-hjhm

Опубликовано: 12 авг. 2024
Источник: github
Github: Не прошло ревью
CVSS4: 9.2
CVSS3: 9.8

Описание

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.

EPSS

Процентиль: 56%
0.00341
Низкий

9.2 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-77
CWE-78

Связанные уязвимости

CVSS3: 9.8
nvd
больше 1 года назад

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.

EPSS

Процентиль: 56%
0.00341
Низкий

9.2 Critical

CVSS4

9.8 Critical

CVSS3

Дефекты

CWE-77
CWE-78