PT-2021-11177
CVE-2020-25753
·
تاريخ النشر
2021-06-16
·
تاريخ التحديث
2021-06-28
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Enphase Envoy versions R3.x and D4.x with v3 software
Description:
An issue was discovered where the default admin password is set to the last 6 digits of the serial number. The serial number can be retrieved by an unauthenticated user at the "info.xml" endpoint.
Recommendations:
For Enphase Envoy versions R3.x and D4.x with v3 software, change the default admin password to a unique and strong password to prevent unauthorized access. As a temporary workaround, consider restricting access to the "info.xml" endpoint until a more permanent solution is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾