CVE-2020-9462 - CERT CVE
ID CVE-2020-9462
Sažetak An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.
Reference
CVSS
Base: 3.3
Impact: 2.9
Exploitability:6.5
Pristup
VektorSloženostAutentikacija
ADJACENT_NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
PARTIAL NONE NONE
CVSS vektor AV:A/AC:L/Au:N/C:P/I:N/A:N
Zadnje važnije ažuriranje 10-06-2020 - 13:58
Objavljeno 04-06-2020 - 16:15