📦 Homeautomation

by Homeautomation Project

🔍 What is Homeautomation?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2020-22001

CRITICAL CVSS 9.8 Apr 27, 2021

CVE-2020-22001 is an authentication bypass vulnerability in HomeAutomation 3.3.2 that allows attackers to spoof their IP address using the X-Forwarded-For header with local loopback addresses (127.0.0...

CVE-2020-21989

HIGH CVSS 8.8 Apr 27, 2021

CVE-2020-21989 is a Cross-Site Request Forgery vulnerability in HomeAutomation 3.3.2 that allows attackers to trick authenticated users into performing unauthorized actions via malicious web requests....

CVE-2020-22000

HIGH CVSS 8.0 Apr 27, 2021

CVE-2020-22000 allows authenticated attackers to execute arbitrary operating system commands on HomeAutomation systems through a vulnerable plugin. Combined with a CSRF vulnerability, this can be expl...