CVE-2019-7678: Path Traversal
Published Feb 9, 2019
·Updated
A directory traversal vulnerability was discovered in Enphase Envoy R3.. via images/, include/, include/js, or include/css on TCP port 8888.
Affected Software
1 affected component
Enphase Envoy>=3.0.0<=3.9.0
Event History
Feb 9, 2019
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-7678?
CVE-2019-7678 is classified as a medium severity vulnerability due to its potential for directory traversal exploits.
2
How do I fix CVE-2019-7678?
To fix CVE-2019-7678, update the Enphase Envoy software to version 3.9.0 or later.
3
What kind of systems are affected by CVE-2019-7678?
CVE-2019-7678 affects Enphase Envoy models running versions from 3.0.0 to 3.9.0.
4
What is a directory traversal vulnerability in the context of CVE-2019-7678?
A directory traversal vulnerability like CVE-2019-7678 allows attackers to access restricted directories and read sensitive files on the system.
5
Can CVE-2019-7678 lead to unauthorized access?
Yes, CVE-2019-7678 can potentially allow unauthorized access to sensitive files on the affected machine.