Approved changes feed: RSS · Atom
cpe:2.3:h:enphase:envoy:*:*:*:*:*:*:*:*
part: h version: * update: *
| Vendor | Enphase (6892a475-a74d-5bd9-8a7a-7e35d6ae69bf) |
|---|---|
| Product | Envoy (d3607298-79cd-5c4e-af04-801ca9fae0d3) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21880 |
vulnerable | 2026-06-08 06:27:36.936614 |
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
Published: 2024-08-10T17:44:48.465Z
Updated: 2025-03-11T13:38:29.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21879 |
vulnerable | 2026-06-08 06:27:36.936073 |
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
Published: 2024-08-10T17:44:49.728Z
Updated: 2025-03-11T13:38:27.809Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21878 |
vulnerable | 2026-06-08 06:27:36.935508 |
Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.
Published: 2024-08-10T17:44:48.892Z
Updated: 2025-03-11T13:38:31.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21876 |
vulnerable | 2026-06-08 06:27:36.930479 |
Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
Published: 2024-08-10T17:44:50.205Z
Updated: 2025-03-11T13:38:30.594Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.