2 Advisories Published – 6-20-23

Today, CISA’s NCCIC-ICS published two control system security advisories for products from Enphase.

Enphase Installer Advisory

This advisory describes a use of hard-coded credentials vulnerability in the Enphase Installer Toolkit. The vulnerability was reported by OBSWCY3F. Enphase has not responded to CISA’s coordination efforts.

NCCIC-ICS reports that a …