CVE-2019-11063

A broken access control vulnerability in SmartHome app Android versions up to 3.0.42190515, ios versions up to 2.0.22 allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway HG100 via http://target/smarthome/devicecontrol witho...

CVE-2019-11063

The CVE-2019-11063 issue is a broken access control in the SmartHome app/Web API server affecting ASUS SmartHome (Android up to 3.0.42_190515; iOS up to 2.0.22) with gateway HG100. The vulnerability permits an attacker on the same LAN to enumerate user accounts and control connected IoT devices v...

CVE-2019-11063 SmartHome application has a broken access control vulnerability in its Web API Server

A broken access control vulnerability in SmartHome app Android versions up to 3.0.42190515, ios versions up to 2.0.22 allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway HG100 via http://target/smarthome/devicecontrol witho...