CVE-2023-33869: Enphase Envoy OS Command Injection
6.3
CVSS
Description
Enphase Envoy versions D7.0.88 is vulnerable to a command injection exploit that may allow an attacker to execute root commands.
Classification
CVE ID: CVE-2023-33869
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.3
Affected Products
Vendor: Enphase
Product: Envoy
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.16% (probability of being exploited)
EPSS Percentile: 53.39% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)