EUVD-2020-30281

Malware in sbrugna...

CVE-2020-28952

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...

Design/Logic Flaw

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...

CVE-2020-28952

CVE-2020-28952 affects Athom Homey and Homey Pro devices before 5.0.0. The ZigBee hub generates a standard network key for encryption, but these devices use a widely known test key (01030507090b0d0f00020406080a0c0d) that is static across issued devices, enabling potential interception or decrypti...

CVE-2020-28952: Use of Hard-coded Credentials

An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...

Athom Homey Trust Management Vulnerability

Athom Homey is a smart home centralized control product from the Dutch company Athom. A security vulnerability exists in Athom Homey and Homey Pro devices before 5.0.0, which stems from the use of a commonly used test key: 01030507090b0d0f00020406080a0c0d...

PT-2021-11606

Name of the Vulnerable Software and Affected Versions: Athom Homey and Homey Pro versions prior to 5.0.0 Description: An issue was discovered where ZigBee hub devices should generate a unique Standard Network Key for encrypted inter-device communication. However, the affected devices use a widely...

CVE-2020-9462

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

Design/Logic Flaw

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

CVE-2020-9462

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

CVE-2020-9462

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...

CVE-2020-9462

CVE-2020-9462 affects Athom Homey and Homey Pro devices up to v4.2.0. Affected component: the device during setup can leak the cleartext Wi‑Fi configuration (including the PSK) to an attacker in RF range, enabling further access to the target network. The connected documents corroborate the issue...

CVE-2020-9462: Cleartext Storage of Sensitive Information

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...