Vendors / Evoko Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Evoko records in CISA KEV No Evoko vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a w…
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01489 · Published 2020-01-19 · No fix listed
Priority LOW 26
Evoko Home 1.31 devices provide different error messages for failed login requests depending on whether the username is valid.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00972 · Published 2020-01-19 · No fix listed CWE-209
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0