Hardcoded credentials

2021-05-2014:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.8%

JSON

homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy.

CPENameOperatorVersion
brain_cube_coreeq2.28.2
brain_cube_coreeq2.28.4

CPE	Name	Operator	Version
	brain_cube_core	eq	2.28.2
	brain_cube_core	eq	2.28.4

References

cwe.mitre.org/data/definitions/522.html

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-027.txt

www.syss.de/pentest-blog/