CVE-2020-7232

CVE-2020-7232 affects Evoko Home devices version 1.31 through 1.37. The issue enables remote attackers to disclose sensitive information (e.g., usernames and password hashes) by sending a WebSocket request to the sockjs/224/uf1psgff/websocket URI over a secure WebSocket (wss://). The available co...

CVE-2020-7231

CVE-2020-7231 affects Evoko Home 1.31 devices. The vulnerability is described as the login process returning different error messages depending on whether the username is valid, which can enable username enumeration (information disclosure) without details on exploited vectors, affected component...