CVE-2020-24395

2021-05-2013:24:53

mitre

www.cve.org

homee brain cube

usb

firmware update

vulnerability

code execution

physical access

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

41.4%

JSON

The USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an attacker with physical access to install compromised firmware. This occurs because of insufficient validation of the firmware image file and can lead to code execution on the device.