CVE-2020-24396

2021-05-2013:20:51

mitre

www.cve.org

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

JSON

homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy.

References

cwe.mitre.org/data/definitions/522.html

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-027.txt

www.syss.de/pentest-blog/