Read the docs

openhab

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

openhab records in CISA KEV

No openhab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Openhab 5 records MEDIUM Openhab Web Interface 1 record MEDIUM

Records

6 records

TI-2024-28435 CVE-2024-42467 · GHSA-v7gr-mqpj-wwh3

CometVisu Backend for openHAB affected by SSRF/XSS

Priority MEDIUM 45

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01044 Published 2024-08-09 Fixed in 4.2.1 CWE-918
TI-2020-04298 CVE-2020-5242

openHAB exec add-ons allow remote arbitrary command execution

Priority MEDIUM 42

openHAB before 2.5.2 allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands on the system with the privileges of the user running openHAB.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01973 Published 2020-02-20 Fixed in 2.5.2 CWE-284
TI-2024-28436 CVE-2024-42468 · GHSA-pcwp-26pw-j98w

Path traversal (CometVisu)

Priority MEDIUM 40

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00808 Published 2024-08-09 Fixed in 4.2.1 CWE-22
TI-2021-04367 CVE-2021-21266

XXE vulnerability in OpenHAB

Priority LOW 31

openHAB is a vendor and technology agnostic open source automation software for your home.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.01113 Published 2021-02-01 Fixed in 2.5.12 CWE-611
Open these records in search →