Critical severity9.1NVD Advisory· Published Aug 12, 2024· Updated Jun 17, 2026
CVE-2024-21876
CVE-2024-21876
Description
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability via a URL parameter in Enphase IQ Gateway (formerly known as Envoy) allows an unautheticated attacker to access or create arbitratry files.This issue affects Envoy: from 4.x to 8.x and < 8.2.4225.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
34.x to 8.x and < 8.2.4225+ 1 more
- (no CPE)range: 4.x to 8.x and < 8.2.4225
- (no CPE)range: 8.0
Patches
Vulnerability mechanics
References
3- csirt.divd.nl/CVE-2024-21876nvdThird Party Advisory
- csirt.divd.nl/DIVD-2024-00011nvdThird Party Advisory
- enphase.com/cybersecurity/advisories/ensa-2024-1nvdVendor Advisory
News mentions
0No linked articles in our index yet.