CVE-2024-21881 — Upload of encrypted packages allows authenticated command execution in Enphase IQ Gateway v4.x and v5.x
Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: 4.x and 5.x
Published: 2024-08-10 · CVSS: 8.6 · CVSS 4.0
Inadequate Encryption Strength vulnerability allow an authenticated attacker to execute arbitrary OS Commands via encrypted package upload.This issue affects Envoy: 4.x and 5.x
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7