ASUS-SmartHome-Exploit

ASUS-SmartHome-Exploit CVE IDs CVE-2019-11061 : Broken access control in HG100 Affected products : ASUS SmartHome Gateway HG100 Firmware version Affected products : ASUS SmartHome Android APP version 3.0.45190701 Description If the attacker is on the same internal network as the HG100 or a mobile...

CVE-2019-11063

A broken access control vulnerability in SmartHome app Android versions up to 3.0.42190515, ios versions up to 2.0.22 allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway HG100 via http://target/smarthome/devicecontrol witho...