Описание
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.
Ссылки
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.0 (включая) до 8.2.4225 (исключая)
Одновременно
cpe:2.3:o:enphase:iq_gateway_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:enphase:iq_gateway:-:*:*:*:*:*:*:*
EPSS
Процентиль: 56%
0.00341
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-77
CWE-78
Связанные уязвимости
CVSS3: 9.8
github
больше 1 года назад
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.
EPSS
Процентиль: 56%
0.00341
Низкий
9.8 Critical
CVSS3
Дефекты
CWE-77
CWE-78