CVE-2020-25755

Published: 2021-06-16T19:15Z

Last Modified: 2024-11-21T05:18Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

An issue was discovered on Enphase Envoy R3.x and D4.x (and other current) devices. The upgrade_start function in /installer/upgrade_start allows remote authenticated users to execute arbitrary commands via the force parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt