11 matches found
EUVD-2020-30281
Malware in sbrugna...
CVE-2020-28952
An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...
Design/Logic Flaw
An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...
CVE-2020-28952
CVE-2020-28952 affects Athom Homey and Homey Pro devices before 5.0.0. The ZigBee hub generates a standard network key for encryption, but these devices use a widely known test key (01030507090b0d0f00020406080a0c0d) that is static across issued devices, enabling potential interception or decrypti...
Athom Homey 信任管理问题漏洞
Athom Homey is a smart home centralized control product from the Dutch company Athom. A security vulnerability exists in Athom Homey and Homey Pro devices before 5.0.0, which stems from the use of a commonly used test key: 01030507090b0d0f00020406080a0c0d...
CVE-2020-28952: Use of Hard-coded Credentials
An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely...
CVE-2020-9462
An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...
Design/Logic Flaw
An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...
CVE-2020-9462
CVE-2020-9462 affects Athom Homey and Homey Pro devices up to v4.2.0. Affected component: the device during setup can leak the cleartext Wi‑Fi configuration (including the PSK) to an attacker in RF range, enabling further access to the target network. The connected documents corroborate the issue...
CVE-2020-9462
An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...
CVE-2020-9462: Cleartext Storage of Sensitive Information
An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further...