Homeseer

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Homeseer records in CISA KEV

No Homeseer vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Homeseer Hs2 3 records MEDIUM

Records

3 records in Homeseer Hs2 · all components

TI-2011-04163 CVE-2011-4835 · GHSA-8m4m-74hv-48hc

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows…

MEDIUM 43

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06967 Published 2011-12-15 No fix listed CWE-22

TI-2011-04165 CVE-2011-4837 · GHSA-xmr6-p3jv-fvww

Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer…

LOW 34

Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01934 Published 2011-12-15 No fix listed CWE-352

TI-2011-04164 CVE-2011-4836 · GHSA-hq2p-fjcp-5j5w

Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20…

LOW 23

Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01537 Published 2011-12-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0