Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-11063

A broken access control vulnerability in SmartHome app (Android versions up to 3.0.42_190515, ios versions up to 2.0.22) allows an attacker in the same local area network to list user accounts and control IoT devices that connect with its gateway (HG100) via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.6%
CVSS Severity
CVSS v3 Score 10.0
CVSS v2 Score 8.3
Products affected by CVE-2019-11063
  • Asus » Smarthome » Version: 1.00.00
    cpe:2.3:a:asus:smarthome:1.00.00
  • Asus » Smarthome » Version: 1.00.04
    cpe:2.3:a:asus:smarthome:1.00.04
  • Asus » Smarthome » Version: 1.00.06
    cpe:2.3:a:asus:smarthome:1.00.06
  • Asus » Smarthome » Version: 1.00.07
    cpe:2.3:a:asus:smarthome:1.00.07
  • Asus » Smarthome » Version: 1.00.08
    cpe:2.3:a:asus:smarthome:1.00.08
  • Asus » Smarthome » Version: 1.00.09
    cpe:2.3:a:asus:smarthome:1.00.09
  • Asus » Smarthome » Version: 1.00.10
    cpe:2.3:a:asus:smarthome:1.00.10
  • Asus » Smarthome » Version: 1.00.11
    cpe:2.3:a:asus:smarthome:1.00.11
  • Asus » Smarthome » Version: 1.00.12
    cpe:2.3:a:asus:smarthome:1.00.12
  • Asus » Smarthome » Version: 1.01.01
    cpe:2.3:a:asus:smarthome:1.01.01
  • Asus » Smarthome » Version: 1.05.04
    cpe:2.3:a:asus:smarthome:1.05.04
  • Asus » Smarthome » Version: 1.3.104
    cpe:2.3:a:asus:smarthome:1.3.104
  • Asus » Smarthome » Version: 1.3.66
    cpe:2.3:a:asus:smarthome:1.3.66
  • Asus » Smarthome » Version: 1.3.87
    cpe:2.3:a:asus:smarthome:1.3.87
  • Asus » Smarthome » Version: 1.4.13
    cpe:2.3:a:asus:smarthome:1.4.13
  • Asus » Smarthome » Version: 1.4.26
    cpe:2.3:a:asus:smarthome:1.4.26
  • Asus » Smarthome » Version: 1.4.29
    cpe:2.3:a:asus:smarthome:1.4.29
  • Asus » Smarthome » Version: 1.4.32
    cpe:2.3:a:asus:smarthome:1.4.32
  • Asus » Smarthome » Version: 1.4.34
    cpe:2.3:a:asus:smarthome:1.4.34
  • Asus » Smarthome » Version: 1.4.37
    cpe:2.3:a:asus:smarthome:1.4.37
  • Asus » Smarthome » Version: 2.0.15
    cpe:2.3:a:asus:smarthome:2.0.15
  • Asus » Smarthome » Version: 2.0.21
    cpe:2.3:a:asus:smarthome:2.0.21
  • Asus » Smarthome » Version: 3.0.27_190111
    cpe:2.3:a:asus:smarthome:3.0.27_190111


Products
Pricing
Contact Us

Shodan ® - All rights reserved