u/Infinite_Cricket_443

▲ 29 r/enphase

Unauthenticated Root Access to the Enphase IQ Gateway

I found a Remote Code Execution (RCE) vulnerability that allows unauthenticated root access.

Enphase has since patched the primary issue in a firmware update, but I believe some important related issues were never fully resolved.

Additionally, I went down this rabbit hole originally because the 4GB Embedded Multi-Media Card (eMMC) in my IQ Gateway failed due to excessive writes, causing it to not work reliably.

j027.net
u/Infinite_Cricket_443 — 8 days ago