CVE-2020-25754: High severity enphase envoy vulnerability
An issue was discovered on Enphase Envoy R3.x and D4.x devices. There is a custom PAM module for user authentication that circumvents traditional user authentication. This module uses a password derived from the MD5 hash of the username and serial number. The serial number can be retrieved by an unauthenticated user at /info.xml. Attempts to change the user password via passwd or other tools have no effect.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25754?
CVE-2020-25754 is considered a high severity vulnerability due to its potential to circumvent traditional authentication methods.
How do I fix CVE-2020-25754?
To remediate CVE-2020-25754, update your Enphase Envoy devices to the latest firmware version that addresses this vulnerability.
What devices are affected by CVE-2020-25754?
CVE-2020-25754 affects Enphase Envoy R3.x and D4.x devices using a custom PAM module for authentication.
What type of authentication issue is present in CVE-2020-25754?
CVE-2020-25754 involves a custom PAM module that allows authentication to be bypassed through a weak password derived from the MD5 hash of the username and serial number.
Can the serial number be exploited in CVE-2020-25754?
Yes, in CVE-2020-25754, the serial number can be retrieved and used to derive the password, posing a significant security risk.