CVE-2020-25755

An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices

published June 16, 2021

CVSS
—
EPSS
3%
Percentile
87.6
In the wild
Unconfirmed
What it is

An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /installer/upgrade_start allows remote authenticated users to execute arbitrary commands via the force parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03076 · 87.6th percentile
Published
2021-06-16T18:27Z
EPSS history
Timeline
  • 16 JUN 18:27Z
    An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices
    cvelistv5