Описание
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
Ссылки
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 4.0 (включая) до 7.3.120 (включая)
Одновременно
cpe:2.3:o:enphase:iq_gateway_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:enphase:iq_gateway:-:*:*:*:*:*:*:*
EPSS
Процентиль: 79%
0.01231
Низкий
7.2 High
CVSS3
Дефекты
CWE-77
CWE-78
Связанные уязвимости
CVSS3: 7.2
github
больше 1 года назад
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
EPSS
Процентиль: 79%
0.01231
Низкий
7.2 High
CVSS3
Дефекты
CWE-77
CWE-78