Security Advisory

CVE-2020-22001

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-27 17:54:07

Last updated 2024-08-04 14:30:33

Assigner mitre

State PUBLISHED

Description

HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution.

← Browse all CVEs View on cve.org ↗