Vendors / Homeautomation Project Records 5 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 2
Exploited now Homeautomation Project records in CISA KEV No Homeautomation Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 48
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart ho…
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03406 · Published 2021-04-27 · No fix listed CWE-290
Priority LOW 39
HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF).
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00748 · Published 2021-04-27 · No fix listed CWE-352
Priority LOW 37
HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin.
CVSS 3.1 HIGH 8.0· Network · Low privileges · User interaction · EPSS 0.01059 · Published 2021-04-27 · No fix listed CWE-352
Priority LOW 30
In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redirect users.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01319 · Published 2021-04-27 · No fix listed CWE-601
Priority LOW 29
HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS).
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00905 · Published 2021-04-27 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 2 2 0 0
