Vulnerabilities

TI-2011-04165 CVE-2011-4837 · GHSA-xmr6-p3jv-fvww

Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer…

LOW 34

Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01934 Published 2011-12-15 No fix listed CWE-352

TI-2011-04164 CVE-2011-4836 · GHSA-hq2p-fjcp-5j5w

Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20…

LOW 23

Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01537 Published 2011-12-15 No fix listed CWE-79

TI-2011-04163 CVE-2011-4835 · GHSA-8m4m-74hv-48hc

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows…

MEDIUM 43

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06967 Published 2011-12-15 No fix listed CWE-22

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer…

Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20…

Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows…