PatchTheCVEhomeautomation vulnerabilities and fixes
Recent CVEs affecting homeautomation, with upgrade or downgrade steps. 5 tracked.
homeautomation has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-04-27. Highest priority: CVE-2020-22001 (score 67/100).
- CVE-2020-22001 CRITICAL 9.8 DOWNGRADE HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using
- CVE-2020-22000 HIGH 8.0 DOWNGRADE HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.
- CVE-2020-21998 MEDIUM 6.1 DOWNGRADE In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly veri
- CVE-2020-21989 HIGH 8.8 DOWNGRADE HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF)
- CVE-2020-21987 MEDIUM 6.1 DOWNGRADE HomeAutomation 3.3.2 is affected by persistent Cross Site Scripting (XSS)
FAQ
How do I fix homeautomation vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is homeautomation being exploited right now?
None of the tracked homeautomation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which homeautomation CVE should I patch first?
CVE-2020-22001 currently ranks highest (67/100): HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using.