VulnCheck KEV: CVE-2023-27482

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

CVE-2023-27482

creationtimestamp| type| source ---|---|--- 2023-03-08 20:23:21+00:00| seen| https://t.me/cibsecurity/59682 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-10 00:00:00+00:00| exploited| The Shadowserver...

CVE-2023-27482

homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Home Assistant has been discovered. This impacts all Home Assistant installation types that use the Supervisor 2023.01.1 or older...

CVE-2023-27482

CVE-2023-27482 affects Home Assistant Supervisor (not Home Assistant Container or Core in Python) via a remotely exploitable authentication bypass of the Supervisor API. Affected installations are those using Supervisor 2023.01.1 or older. Mitigation: Supervisor 2023.03.1 has been rolled out to a...