exploitDog

CVE-2019-7676

Опубликовано: 09 фев. 2019

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

A weak password vulnerability was discovered in Enphase Envoy R3... One can login via TCP port 8888 with the admin password for the admin account.

Ссылки

https://github.com/pudding2/enphase-energy/blob/master/weak_password.txt
Third Party Advisory
https://github.com/pudding2/enphase-energy/blob/master/weak_password_1.png
Third Party Advisory
https://github.com/pudding2/enphase-energy/blob/master/weak_password_2.png
Third Party Advisory
https://github.com/pudding2/enphase-energy/blob/master/weak_password.txt
Third Party Advisory
https://github.com/pudding2/enphase-energy/blob/master/weak_password_1.png
Third Party Advisory
https://github.com/pudding2/enphase-energy/blob/master/weak_password_2.png
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:enphase:envoy:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 3.9.0 (включая)

EPSS

Процентиль: 60%

0.00391

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-521

Связанные уязвимости

GHSA-mj45-vwww-g6pr

CVSS3: 7.2

github

больше 3 лет назад

A weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port 8888 with the admin password for the admin account.

EPSS

Процентиль: 60%

0.00391

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-521