Iq Gateway Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:enphase:iq_gateway_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Enphase (6892a475-a74d-5bd9-8a7a-7e35d6ae69bf) |
|---|---|
| Product | Iq Gateway Firmware (c178351a-6ca1-5a43-868f-4a56c0224fa7) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-21880 |
vulnerable | 2026-06-08 06:27:36.936669 |
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
Published: 2024-08-10T17:44:48.465Z
Updated: 2025-03-11T13:38:29.210Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21879 |
vulnerable | 2026-06-08 06:27:36.936133 |
URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability through an url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
Published: 2024-08-10T17:44:49.728Z
Updated: 2025-03-11T13:38:27.809Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21878 |
vulnerable | 2026-06-08 06:27:36.935571 |
Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Enphase IQ Gateway (formerly known as Envoy) allows OS Command Injection. This vulnerability is present in an internal script.This issue affects Envoy: from 4.x up to and including 8.x and is currently unpatched.
Published: 2024-08-10T17:44:48.892Z
Updated: 2025-03-11T13:38:31.973Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21877 |
vulnerable | 2026-06-08 06:27:36.934843 |
Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability through a url parameter in Enphase IQ Gateway (formerly known as Envoy) allows File Manipulation. The endpoint requires authentication.This issue affects Envoy: from 4.x to 8.0 and < 8.2.4225.
Published: 2024-08-10T17:44:49.284Z
Updated: 2025-03-11T13:38:26.399Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21876 |
vulnerable | 2026-06-08 06:27:36.931549 |
Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
Published: 2024-08-10T17:44:50.205Z
Updated: 2025-03-11T13:38:30.594Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.