CVE Catalog

CVE-2023-33869

MediumCVSS 6.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Elevated risk
0.93%

56th percentile - higher than 56% of all known CVEs

Summary

Enphase Envoy version D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

Risk Assessment

Exploitation of this vulnerability could lead to full control over the device, posing a serious security threat.

Recommendation

It is recommended to update to the latest software version to mitigate this vulnerability.

Original NVD description (English source)

Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS