CVE-2023-32274

—

CVSS 3.1

7.5 high

EPSS

<1%p45

Published

Jun 20, 2023 (Jun 20, 2023)

Modified

Jun 17, 2026

Description

Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information.

Vendors: enphase
Products: installer toolkit
Weakness: CWE-798
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.