Vulnerabilities > Enphase > Envoy Firmware > Critical

DATE CVE VULNERABILITY TITLE RISK
2023-06-20 CVE-2023-33869 OS Command Injection vulnerability in Enphase Envoy Firmware D7.0.88
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.
network
low complexity
enphase CWE-78
critical
9.8
2021-06-16 CVE-2020-25753 Unspecified vulnerability in Enphase Envoy Firmware D4.0/R3.0
An issue was discovered on Enphase Envoy R3.x and D4.x devices with v3 software.
network
low complexity
enphase
critical
9.8