CVE-2023-32274

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Enphase Installer Toolkit versions 3.27.0 has hard coded credentials embedded in binary code in the Android application. An attacker can exploit this and gain access to sensitive information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-798

Affected software

Vendor	Product	Versions
Enphase	Enphase Installer Toolkit	3.27.0

References

https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-02Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-advisories/icsa-23-171-02Third Party Advisory, US Government Resource

Timeline

Published: Jun 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-322754.4An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially craf CVE-2023-322767.8Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead CVE-2023-322776.1Untrusted Pointer Dereference in I/O subsystem for some Intel(R) QAT software before version 2.0.5 may allow authenticated user to potential CVE-2023-322787.3Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver i CVE-2023-322797.5Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthent CVE-2023-32285.7Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0.CVE-2023-322805.3Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated CVE-2023-322817.8The affected application lacks proper validation of user-supplied data when parsing project files (e.g., CSP). This could lead to an out-of-CVE-2023-322827.2Race condition in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via l CVE-2023-322835.5Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an authe CVE-2023-322849.8An out-of-bounds write vulnerability exists in the tiff_planar_adobe functionality of Accusoft ImageGear 20.1. A specially crafted malformed CVE-2023-322854.4Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local acc