High severity7.2NVD Advisory· Published Aug 12, 2024· Updated Jun 17, 2026
CVE-2024-21880
CVE-2024-21880
Description
Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability via the url parameter of an authenticated enpoint in Enphase IQ Gateway (formerly known as Enphase) allows OS Command Injection.This issue affects Envoy: 4.x <= 7.x
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=7.x
Patches
Vulnerability mechanics
References
3- csirt.divd.nl/CVE-2024-21880nvdThird Party Advisory
- csirt.divd.nl/DIVD-2024-00011nvdThird Party Advisory
- enphase.com/cybersecurity/advisories/ensa-2024-5nvdVendor Advisory
News mentions
0No linked articles in our index yet.