CVE-2020-21987

概要

参考情報

• exploit-db.com/exploits/47806 · Exploit
• zeroscience.mk/en/vulnerabilities/ZSL-2019-5556.php · Exploit

homeautomation のその他の脆弱性

• CVE-2020-22001緊急 9.8HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header wi…
• CVE-2020-22000高 8.0HomeAutomation 3.3.2 suffers from an authenticated OS command execution vulnerability using custom command v0.1 plugin. This can be exploite…
• CVE-2020-21998中 6.1In HomeAutomation 3.3.2 input passed via the 'redirect' GET parameter in 'api.php' script is not properly verified before being used to redi…
• CVE-2020-21989高 8.8HomeAutomation 3.3.2 is affected by Cross Site Request Forgery (CSRF). The application interface allows users to perform certain actions via…