ASUS SmartHome Access Control Error Vulnerability

ASUS SmartHome is a smart home control and management application from Asus Taiwan, China. A security vulnerability exists in ASUS SmartHome 3.0.42190515 and later Android and 2.0.22 and earlier iOS. The vulnerability can be exploited by an attacker with the http://target/smarthome/devicecontrol...

CVE-2019-11061

A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://target/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 Confidentiality, Integrity...

PT-2019-12158

Name of the Vulnerable Software and Affected Versions HG100 firmware versions up to 4.00.06 Description A broken access control issue allows an attacker in the same local area network to control IoT devices without authentication by accessing the http://target/smarthome/devicecontrol endpoint...

PT-2019-12160

Name of the Vulnerable Software and Affected Versions SmartHome app Android versions up to 3.0.42 190515 SmartHome app iOS versions up to 2.0.22 Description A broken access control issue allows an attacker in the same local area network to list user accounts and control IoT devices connected to t...