What’s Vulnerable › Products

Enphase IQ Gateway vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Enphase IQ Gateway version is affected

Latest Enphase IQ Gateway vulnerabilities

• CVE-2024-21880 — URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway version 4.x <= 7.x (CVSS 7.2)
• CVE-2024-21879 — URL parameter manipulations allows an authenticated attacker to execute arbitrary OS commands in Enphase IQ Gateway v4.x to v8.x and < v8.2.4225 (CVSS 8.8)
• CVE-2024-21878 — Command Injection through Unsafe File Name Evaluation in internal script in Enphase IQ Gateway v4.x to and including 8.x (CVSS 9.8)
• CVE-2024-21877 — Insecure File Generation Based on User Input in Enphase IQ Gateway version 4.x to 8.x and < 8.2.4225 (CVSS 6.5)
• CVE-2024-21876 — Unauthenticated Path Traversal via URL Parameter in Enphase IQ Gateway version < 8.2.4225 (CVSS 9.1)