Description
A weak password vulnerability was discovered in Enphase Envoy R3.*.*. One can login via TCP port 8888 with the admin password for the admin account.
References (3)
Scores
CVSS v3
7.2
EPSS
0.0039
EPSS Percentile
60.2%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-521
Status
published
Products (1)
enphase/envoy
3.0.0 - 3.9.0
Published
Feb 09, 2019
Tracked Since
Feb 18, 2026