HomeServe Home Repair security vulnerabilities

HomeServe Home Repair is a home repair application from HomeServe, Inc. A security vulnerability exists in HomeServe Home Repair version 3.3.4 that stems from improper access control and allows a physically proximate attacker to elevate privileges through the fingerprint authentication feature...

PT-2024-28800

Name of the Vulnerable Software and Affected Versions HomeServe Home Repair android app version 3.3.4 Description An issue with access control in the HomeServe Home Repair android app allows a physically proximate attacker to escalate privileges via the fingerprint authentication function. This...

CVE-2024-40240: Undefined Security Weakness

An incorrect access control issue in HomeServe Home Repair' android app - 3.3.4 allows a physically proximate attacker to escalate privileges via the fingerprint authentication function...

CVE-2019-20458

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...

CVE-2019-20459

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS...

SUSE CVE-2024-9902

A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...

CVE-2019-20458

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...

CVE-2019-20459: Undefined Security Weakness

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS...

CVE-2019-20459

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. With the SNMPv1 public community, all values can be read, and with the epson community, all the changeable values can be written/updated, as demonstrated by permanently disabling the network card or changing the DNS...

CVE-2019-20458

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...

CVE-2019-20458

The Epson Expression Home XP255 (version 20.08.FM10I8 ) is vulnerable to an issue where the device functions without a password by default. Because users are not prompted to set up a password, any individual who connects to the web admin panel can gain administrator privileges without any credent...

Svakom Siime Eye security vulnerability

Svakom Siime Eye is a smart home device from Svakom USA. A security vulnerability exists in Svakom Siime Eye version 14.1.00000001.3.330.0.0.3.14, which stems from vulnerability to cross-site request forgery attacks...

Epson Express Home XP255 security vulnerability

The Epson Express Home XP255 is a printer from the Japanese company Epson Epson. A security vulnerability exists in the Epson Express Home XP255 version 20.08, which stems from lax management of access rights to the public community for SNMPv1 and the epson community, which allows unauthorized...

Epson Express Home XP255 security vulnerability

The Epson Express Home XP255 is a printer from Epson Japan. A security vulnerability exists in the Epson Express Home XP255 version 20.08, which stems from a failure to validate the legitimacy of a POST request via a CSRF token or other mechanism, making it susceptible to cross-site request forge...

CVE-2019-20460

The Epson Expression Home XP255 (version 20.08.FM10I8 ) is vulnerable to a Cross-Site Request Forgery (CSRF) attack because POST requests lack mandatory (anti-)CSRF tokens or similar validation mechanisms. This flaw allows an attacker to send text directly to the RAW printer interface , potential...

CVE-2019-20460

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...

PT-2024-10734 · Epson · Epson Expression Home Xp255

Name of the Vulnerable Software and Affected Versions: Epson Expression Home XP255 version 20.08.FM10I8 Description: An issue was discovered where the device comes without a password and the user is not prompted to set one up, allowing anyone to access the web admin panel and become admin without...

CVE-2019-20460

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...

CVE-2019-20458: Incorrect Default Permissions

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. By default, the device comes and functions without a password. The user is at no point prompted to set up a password on the device leaving a number of devices without a password. In this case, anyone connecting to the we...

CVE-2019-20460: Cross-Site Request Forgery (CSRF)

An issue was discovered on Epson Expression Home XP255 20.08.FM10I8 devices. POST requests don't require anti-CSRF tokens or other mechanisms for validating that the request is from a legitimate source. In addition, CSRF attacks can be used to send text directly to the RAW printer interface. For...