Approved changes feed: RSS · Atom

cpe:2.3:a:enphase:iq_gateway:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorEnphase (6892a475-a74d-5bd9-8a7a-7e35d6ae69bf)
ProductIq Gateway (970ef118-a810-5ddc-9dcd-018d2542a2b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21876 vulnerable 2026-06-08 06:27:36.930998 Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
Published: 2024-08-10T17:44:50.205Z
Updated: 2025-03-11T13:38:30.594Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.