CVE-2024-21876: Path Traversal vulnerability in Enphase IQ Gateway. Unauthenticated attackers can exploit a flaw in URL parameter handling to access or create arbitrary files.

CVE-2024-21876 is a critical Path Traversal vulnerability affecting Enphase IQ Gateway (formerly Envoy) versions 4.x through 8.x and before 8.2.4225. This vulnerability allows unauthenticated attackers to read or create arbitrary files on the system by manipulating URL parameters, posing a significant security risk. While the CVSS score is 0, the SOCRadar Vulnerability Risk Score (SVRS) is 79, indicating a near-critical threat level that demands immediate investigation and patching despite the low CVSS. Successful exploitation can lead to data breaches, system compromise, and potentially unauthorized access to sensitive information. Businesses using affected Enphase IQ Gateway versions should prioritize updating to version 8.2.4225 or later to mitigate this serious vulnerability.