Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: openhab Clear all filters
TI-2024-28436 CVE-2024-42468 · GHSA-pcwp-26pw-j98w

Path traversal (CometVisu)

Priority MEDIUM 40

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00808 Published 2024-08-09 Fixed in 4.2.1 CWE-22
TI-2024-28435 CVE-2024-42467 · GHSA-v7gr-mqpj-wwh3

CometVisu Backend for openHAB affected by SSRF/XSS

Priority MEDIUM 45

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.01044 Published 2024-08-09 Fixed in 4.2.1 CWE-918
TI-2021-04367 CVE-2021-21266

XXE vulnerability in OpenHAB

Priority LOW 31

openHAB is a vendor and technology agnostic open source automation software for your home.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.01113 Published 2021-02-01 Fixed in 2.5.12 CWE-611
TI-2020-04298 CVE-2020-5242

openHAB exec add-ons allow remote arbitrary command execution

Priority MEDIUM 42

openHAB before 2.5.2 allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands on the system with the privileges of the user running openHAB.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01973 Published 2020-02-20 Fixed in 2.5.2 CWE-284