▲ 29 r/enphase
Unauthenticated Root Access to the Enphase IQ Gateway
I found a Remote Code Execution (RCE) vulnerability that allows unauthenticated root access.
Enphase has since patched the primary issue in a firmware update, but I believe some important related issues were never fully resolved.
Additionally, I went down this rabbit hole originally because the 4GB Embedded Multi-Media Card (eMMC) in my IQ Gateway failed due to excessive writes, causing it to not work reliably.
u/Infinite_Cricket_443 — 8 days ago