Vulnerability Details CVE-2021-3152
Home Assistant before 2021.1.3 does not have a protection layer that can help to prevent directory-traversal attacks against custom integrations. NOTE: the vendor's perspective is that the vulnerability itself is in custom integrations written by third parties, not in Home Assistant; however, Home Assistant does have a security update that is worthwhile in addressing this situation
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 60.1%
CVSS Severity
CVSS v3 Score 5.3
CVSS v2 Score 5.0
Products affected by CVE-2021-3152
-
cpe:2.3:a:home-assistant:home-assistant:0.10
-
cpe:2.3:a:home-assistant:home-assistant:0.10.1
-
cpe:2.3:a:home-assistant:home-assistant:0.11
-
cpe:2.3:a:home-assistant:home-assistant:0.11.1
-
cpe:2.3:a:home-assistant:home-assistant:0.12
-
cpe:2.3:a:home-assistant:home-assistant:0.13
-
cpe:2.3:a:home-assistant:home-assistant:0.13.1
-
cpe:2.3:a:home-assistant:home-assistant:0.14
-
cpe:2.3:a:home-assistant:home-assistant:0.14.1
-
cpe:2.3:a:home-assistant:home-assistant:0.14.2
-
cpe:2.3:a:home-assistant:home-assistant:0.15
-
cpe:2.3:a:home-assistant:home-assistant:0.16
-
cpe:2.3:a:home-assistant:home-assistant:0.16.1
-
cpe:2.3:a:home-assistant:home-assistant:0.17
-
cpe:2.3:a:home-assistant:home-assistant:0.17.1
-
cpe:2.3:a:home-assistant:home-assistant:0.17.2
-
cpe:2.3:a:home-assistant:home-assistant:0.17.3
-
cpe:2.3:a:home-assistant:home-assistant:0.18
-
cpe:2.3:a:home-assistant:home-assistant:0.19
-
cpe:2.3:a:home-assistant:home-assistant:0.19.1
-
cpe:2.3:a:home-assistant:home-assistant:0.19.2
-
cpe:2.3:a:home-assistant:home-assistant:0.19.3
-
cpe:2.3:a:home-assistant:home-assistant:0.19.4
-
cpe:2.3:a:home-assistant:home-assistant:0.20
-
cpe:2.3:a:home-assistant:home-assistant:0.20.1
-
cpe:2.3:a:home-assistant:home-assistant:0.20.2
-
cpe:2.3:a:home-assistant:home-assistant:0.20.3
-
cpe:2.3:a:home-assistant:home-assistant:0.21
-
cpe:2.3:a:home-assistant:home-assistant:0.21.1
-
cpe:2.3:a:home-assistant:home-assistant:0.21.2
-
cpe:2.3:a:home-assistant:home-assistant:0.22
-
cpe:2.3:a:home-assistant:home-assistant:0.23
-
cpe:2.3:a:home-assistant:home-assistant:0.23.1
-
cpe:2.3:a:home-assistant:home-assistant:0.24
-
cpe:2.3:a:home-assistant:home-assistant:0.24.1
-
cpe:2.3:a:home-assistant:home-assistant:0.25
-
cpe:2.3:a:home-assistant:home-assistant:0.25.1
-
cpe:2.3:a:home-assistant:home-assistant:0.25.2
-
cpe:2.3:a:home-assistant:home-assistant:0.26
-
cpe:2.3:a:home-assistant:home-assistant:0.26.1
-
cpe:2.3:a:home-assistant:home-assistant:0.26.2
-
cpe:2.3:a:home-assistant:home-assistant:0.26.3
-
cpe:2.3:a:home-assistant:home-assistant:0.27.0
-
cpe:2.3:a:home-assistant:home-assistant:0.27.1
-
cpe:2.3:a:home-assistant:home-assistant:0.27.2
-
cpe:2.3:a:home-assistant:home-assistant:0.28
-
cpe:2.3:a:home-assistant:home-assistant:0.28.1
-
cpe:2.3:a:home-assistant:home-assistant:0.28.2
-
cpe:2.3:a:home-assistant:home-assistant:0.29
-
cpe:2.3:a:home-assistant:home-assistant:0.29.2
-
cpe:2.3:a:home-assistant:home-assistant:0.29.3
-
cpe:2.3:a:home-assistant:home-assistant:0.29.4
-
cpe:2.3:a:home-assistant:home-assistant:0.29.5
-
cpe:2.3:a:home-assistant:home-assistant:0.29.6
-
cpe:2.3:a:home-assistant:home-assistant:0.29.7
-
cpe:2.3:a:home-assistant:home-assistant:0.30
-
cpe:2.3:a:home-assistant:home-assistant:0.30.1
-
cpe:2.3:a:home-assistant:home-assistant:0.30.2
-
cpe:2.3:a:home-assistant:home-assistant:0.31
-
cpe:2.3:a:home-assistant:home-assistant:0.31.1
-
cpe:2.3:a:home-assistant:home-assistant:0.32
-
cpe:2.3:a:home-assistant:home-assistant:0.32.1
-
cpe:2.3:a:home-assistant:home-assistant:0.32.2
-
cpe:2.3:a:home-assistant:home-assistant:0.32.3
-
cpe:2.3:a:home-assistant:home-assistant:0.32.4
-
cpe:2.3:a:home-assistant:home-assistant:0.33
-
cpe:2.3:a:home-assistant:home-assistant:0.33.1
-
cpe:2.3:a:home-assistant:home-assistant:0.33.2
-
cpe:2.3:a:home-assistant:home-assistant:0.33.3
-
cpe:2.3:a:home-assistant:home-assistant:0.33.4
-
cpe:2.3:a:home-assistant:home-assistant:0.34
-
cpe:2.3:a:home-assistant:home-assistant:0.34.1
-
cpe:2.3:a:home-assistant:home-assistant:0.34.2
-
cpe:2.3:a:home-assistant:home-assistant:0.34.3
-
cpe:2.3:a:home-assistant:home-assistant:0.34.4
-
cpe:2.3:a:home-assistant:home-assistant:0.34.5
-
cpe:2.3:a:home-assistant:home-assistant:0.35
-
cpe:2.3:a:home-assistant:home-assistant:0.35.1
-
cpe:2.3:a:home-assistant:home-assistant:0.35.2
-
cpe:2.3:a:home-assistant:home-assistant:0.35.3
-
cpe:2.3:a:home-assistant:home-assistant:0.36
-
cpe:2.3:a:home-assistant:home-assistant:0.36.1
-
cpe:2.3:a:home-assistant:home-assistant:0.37
-
cpe:2.3:a:home-assistant:home-assistant:0.37.1
-
cpe:2.3:a:home-assistant:home-assistant:0.38
-
cpe:2.3:a:home-assistant:home-assistant:0.38.1
-
cpe:2.3:a:home-assistant:home-assistant:0.38.2
-
cpe:2.3:a:home-assistant:home-assistant:0.38.3
-
cpe:2.3:a:home-assistant:home-assistant:0.38.4
-
cpe:2.3:a:home-assistant:home-assistant:0.39
-
cpe:2.3:a:home-assistant:home-assistant:0.39.1
-
cpe:2.3:a:home-assistant:home-assistant:0.39.2
-
cpe:2.3:a:home-assistant:home-assistant:0.39.3
-
cpe:2.3:a:home-assistant:home-assistant:0.40
-
cpe:2.3:a:home-assistant:home-assistant:0.40.1
-
cpe:2.3:a:home-assistant:home-assistant:0.40.2
-
cpe:2.3:a:home-assistant:home-assistant:0.41
-
cpe:2.3:a:home-assistant:home-assistant:0.42
-
cpe:2.3:a:home-assistant:home-assistant:0.42.1
-
cpe:2.3:a:home-assistant:home-assistant:0.42.2
-
cpe:2.3:a:home-assistant:home-assistant:0.42.3
-
cpe:2.3:a:home-assistant:home-assistant:0.42.4
-
cpe:2.3:a:home-assistant:home-assistant:0.43
-
cpe:2.3:a:home-assistant:home-assistant:0.43.1
-
cpe:2.3:a:home-assistant:home-assistant:0.43.2
-
cpe:2.3:a:home-assistant:home-assistant:0.44
-
cpe:2.3:a:home-assistant:home-assistant:0.44.1
-
cpe:2.3:a:home-assistant:home-assistant:0.44.2
-
cpe:2.3:a:home-assistant:home-assistant:0.45
-
cpe:2.3:a:home-assistant:home-assistant:0.45.1
-
cpe:2.3:a:home-assistant:home-assistant:0.46
-
cpe:2.3:a:home-assistant:home-assistant:0.46.1
-
cpe:2.3:a:home-assistant:home-assistant:0.47
-
cpe:2.3:a:home-assistant:home-assistant:0.47.1
-
cpe:2.3:a:home-assistant:home-assistant:0.48
-
cpe:2.3:a:home-assistant:home-assistant:0.48.1
-
cpe:2.3:a:home-assistant:home-assistant:0.49
-
cpe:2.3:a:home-assistant:home-assistant:0.49.1
-
cpe:2.3:a:home-assistant:home-assistant:0.50
-
cpe:2.3:a:home-assistant:home-assistant:0.50.2
-
cpe:2.3:a:home-assistant:home-assistant:0.51
-
cpe:2.3:a:home-assistant:home-assistant:0.51.1
-
cpe:2.3:a:home-assistant:home-assistant:0.51.2
-
cpe:2.3:a:home-assistant:home-assistant:0.52
-
cpe:2.3:a:home-assistant:home-assistant:0.52.1
-
cpe:2.3:a:home-assistant:home-assistant:0.53
-
cpe:2.3:a:home-assistant:home-assistant:0.53.1
-
cpe:2.3:a:home-assistant:home-assistant:0.54
-
cpe:2.3:a:home-assistant:home-assistant:0.55
-
cpe:2.3:a:home-assistant:home-assistant:0.55.1
-
cpe:2.3:a:home-assistant:home-assistant:0.55.2
-
cpe:2.3:a:home-assistant:home-assistant:0.56
-
cpe:2.3:a:home-assistant:home-assistant:0.56.1
-
cpe:2.3:a:home-assistant:home-assistant:0.56.2
-
cpe:2.3:a:home-assistant:home-assistant:0.57
-
cpe:2.3:a:home-assistant:home-assistant:0.57.1
-
cpe:2.3:a:home-assistant:home-assistant:0.57.2
-
cpe:2.3:a:home-assistant:home-assistant:0.57.3
-
cpe:2.3:a:home-assistant:home-assistant:0.58
-
cpe:2.3:a:home-assistant:home-assistant:0.58.1
-
cpe:2.3:a:home-assistant:home-assistant:0.59
-
cpe:2.3:a:home-assistant:home-assistant:0.59.1
-
cpe:2.3:a:home-assistant:home-assistant:0.59.2
-
cpe:2.3:a:home-assistant:home-assistant:0.60
-
cpe:2.3:a:home-assistant:home-assistant:0.60.1
-
cpe:2.3:a:home-assistant:home-assistant:0.61
-
cpe:2.3:a:home-assistant:home-assistant:0.61.1
-
cpe:2.3:a:home-assistant:home-assistant:0.62.0
-
cpe:2.3:a:home-assistant:home-assistant:0.62.1
-
cpe:2.3:a:home-assistant:home-assistant:0.63
-
cpe:2.3:a:home-assistant:home-assistant:0.63.1
-
cpe:2.3:a:home-assistant:home-assistant:0.63.2
-
cpe:2.3:a:home-assistant:home-assistant:0.63.3
-
cpe:2.3:a:home-assistant:home-assistant:0.64.0
-
cpe:2.3:a:home-assistant:home-assistant:0.64.1
-
cpe:2.3:a:home-assistant:home-assistant:0.64.2
-
cpe:2.3:a:home-assistant:home-assistant:0.64.3
-
cpe:2.3:a:home-assistant:home-assistant:0.65.0
-
cpe:2.3:a:home-assistant:home-assistant:0.65.1
-
cpe:2.3:a:home-assistant:home-assistant:0.65.2
-
cpe:2.3:a:home-assistant:home-assistant:0.65.3
-
cpe:2.3:a:home-assistant:home-assistant:0.65.4
-
cpe:2.3:a:home-assistant:home-assistant:0.65.5
-
cpe:2.3:a:home-assistant:home-assistant:0.65.6
-
cpe:2.3:a:home-assistant:home-assistant:0.66.0
-
cpe:2.3:a:home-assistant:home-assistant:0.66.1
-
cpe:2.3:a:home-assistant:home-assistant:0.67.0
-
cpe:2.3:a:home-assistant:home-assistant:0.67.1
-
cpe:2.3:a:home-assistant:home-assistant:0.68.0
-
cpe:2.3:a:home-assistant:home-assistant:0.68.1
-
cpe:2.3:a:home-assistant:home-assistant:0.69.0
-
cpe:2.3:a:home-assistant:home-assistant:0.69.1
-
cpe:2.3:a:home-assistant:home-assistant:0.7
-
cpe:2.3:a:home-assistant:home-assistant:0.7.1
-
cpe:2.3:a:home-assistant:home-assistant:0.7.2
-
cpe:2.3:a:home-assistant:home-assistant:0.7.3
-
cpe:2.3:a:home-assistant:home-assistant:0.7.4
-
cpe:2.3:a:home-assistant:home-assistant:0.7.5
-
cpe:2.3:a:home-assistant:home-assistant:0.7.6
-
cpe:2.3:a:home-assistant:home-assistant:0.7.7
-
cpe:2.3:a:home-assistant:home-assistant:0.70.0
-
cpe:2.3:a:home-assistant:home-assistant:0.70.1
-
cpe:2.3:a:home-assistant:home-assistant:0.71.0
-
cpe:2.3:a:home-assistant:home-assistant:0.72.0
-
cpe:2.3:a:home-assistant:home-assistant:0.72.1
-
cpe:2.3:a:home-assistant:home-assistant:0.73.0
-
cpe:2.3:a:home-assistant:home-assistant:0.73.1
-
cpe:2.3:a:home-assistant:home-assistant:0.73.2
-
cpe:2.3:a:home-assistant:home-assistant:0.74.0
-
cpe:2.3:a:home-assistant:home-assistant:0.74.1
-
cpe:2.3:a:home-assistant:home-assistant:0.74.2
-
cpe:2.3:a:home-assistant:home-assistant:0.75.0
-
cpe:2.3:a:home-assistant:home-assistant:0.75.1
-
cpe:2.3:a:home-assistant:home-assistant:0.75.2
-
cpe:2.3:a:home-assistant:home-assistant:0.75.3
-
cpe:2.3:a:home-assistant:home-assistant:0.76.0
-
cpe:2.3:a:home-assistant:home-assistant:0.76.1
-
cpe:2.3:a:home-assistant:home-assistant:0.76.2
-
cpe:2.3:a:home-assistant:home-assistant:0.77.0
-
cpe:2.3:a:home-assistant:home-assistant:0.77.1
-
cpe:2.3:a:home-assistant:home-assistant:0.77.2
-
cpe:2.3:a:home-assistant:home-assistant:0.77.3
-
cpe:2.3:a:home-assistant:home-assistant:0.78.0
-
cpe:2.3:a:home-assistant:home-assistant:0.78.1
-
cpe:2.3:a:home-assistant:home-assistant:0.78.2
-
cpe:2.3:a:home-assistant:home-assistant:0.78.3
-
cpe:2.3:a:home-assistant:home-assistant:0.79.0
-
cpe:2.3:a:home-assistant:home-assistant:0.79.1
-
cpe:2.3:a:home-assistant:home-assistant:0.79.2
-
cpe:2.3:a:home-assistant:home-assistant:0.79.3
-
cpe:2.3:a:home-assistant:home-assistant:0.8
-
cpe:2.3:a:home-assistant:home-assistant:0.80.0
-
cpe:2.3:a:home-assistant:home-assistant:0.80.1
-
cpe:2.3:a:home-assistant:home-assistant:0.80.2
-
cpe:2.3:a:home-assistant:home-assistant:0.80.3
-
cpe:2.3:a:home-assistant:home-assistant:0.81.0
-
cpe:2.3:a:home-assistant:home-assistant:0.81.1
-
cpe:2.3:a:home-assistant:home-assistant:0.81.2
-
cpe:2.3:a:home-assistant:home-assistant:0.81.4
-
cpe:2.3:a:home-assistant:home-assistant:0.81.5
-
cpe:2.3:a:home-assistant:home-assistant:0.81.6
-
cpe:2.3:a:home-assistant:home-assistant:0.82.0
-
cpe:2.3:a:home-assistant:home-assistant:0.82.1
-
cpe:2.3:a:home-assistant:home-assistant:0.83.0
-
cpe:2.3:a:home-assistant:home-assistant:0.83.1
-
cpe:2.3:a:home-assistant:home-assistant:0.83.2
-
cpe:2.3:a:home-assistant:home-assistant:0.83.3
-
cpe:2.3:a:home-assistant:home-assistant:0.84.0
-
cpe:2.3:a:home-assistant:home-assistant:0.84.1
-
cpe:2.3:a:home-assistant:home-assistant:0.84.2
-
cpe:2.3:a:home-assistant:home-assistant:0.84.3
-
cpe:2.3:a:home-assistant:home-assistant:0.84.4
-
cpe:2.3:a:home-assistant:home-assistant:0.84.5
-
cpe:2.3:a:home-assistant:home-assistant:0.84.6
-
cpe:2.3:a:home-assistant:home-assistant:0.85.0
-
cpe:2.3:a:home-assistant:home-assistant:0.85.1
-
cpe:2.3:a:home-assistant:home-assistant:0.86.0
-
cpe:2.3:a:home-assistant:home-assistant:0.86.1
-
cpe:2.3:a:home-assistant:home-assistant:0.86.2
-
cpe:2.3:a:home-assistant:home-assistant:0.86.3
-
cpe:2.3:a:home-assistant:home-assistant:0.86.4
-
cpe:2.3:a:home-assistant:home-assistant:0.87.0
-
cpe:2.3:a:home-assistant:home-assistant:0.87.1
-
cpe:2.3:a:home-assistant:home-assistant:0.88.0
-
cpe:2.3:a:home-assistant:home-assistant:0.88.1
-
cpe:2.3:a:home-assistant:home-assistant:0.88.2
-
cpe:2.3:a:home-assistant:home-assistant:0.89.0
-
cpe:2.3:a:home-assistant:home-assistant:0.89.1
-
cpe:2.3:a:home-assistant:home-assistant:0.89.2
-
cpe:2.3:a:home-assistant:home-assistant:0.9
-
cpe:2.3:a:home-assistant:home-assistant:0.9.1
-
cpe:2.3:a:home-assistant:home-assistant:0.90.0
-
cpe:2.3:a:home-assistant:home-assistant:0.90.1
-
cpe:2.3:a:home-assistant:home-assistant:0.90.2
-
cpe:2.3:a:home-assistant:home-assistant:0.91.0
-
cpe:2.3:a:home-assistant:home-assistant:0.91.1
-
cpe:2.3:a:home-assistant:home-assistant:0.91.2
-
cpe:2.3:a:home-assistant:home-assistant:0.91.3
-
cpe:2.3:a:home-assistant:home-assistant:0.91.4
-
cpe:2.3:a:home-assistant:home-assistant:0.92.0
-
cpe:2.3:a:home-assistant:home-assistant:0.92.1
-
cpe:2.3:a:home-assistant:home-assistant:0.92.2
-
cpe:2.3:a:home-assistant:home-assistant:0.93.0
-
cpe:2.3:a:home-assistant:home-assistant:0.93.1
-
cpe:2.3:a:home-assistant:home-assistant:0.93.2
-
cpe:2.3:a:home-assistant:home-assistant:0.94.0
-
cpe:2.3:a:home-assistant:home-assistant:0.94.1
-
cpe:2.3:a:home-assistant:home-assistant:0.94.2
-
cpe:2.3:a:home-assistant:home-assistant:0.94.3
-
cpe:2.3:a:home-assistant:home-assistant:0.94.4
-
cpe:2.3:a:home-assistant:home-assistant:0.95.0
-
cpe:2.3:a:home-assistant:home-assistant:0.95.1
-
cpe:2.3:a:home-assistant:home-assistant:0.95.2
-
cpe:2.3:a:home-assistant:home-assistant:0.95.3
-
cpe:2.3:a:home-assistant:home-assistant:0.95.4
-
cpe:2.3:a:home-assistant:home-assistant:0.96.0
-
cpe:2.3:a:home-assistant:home-assistant:0.96.1
-
cpe:2.3:a:home-assistant:home-assistant:0.96.2
-
cpe:2.3:a:home-assistant:home-assistant:0.96.3
-
cpe:2.3:a:home-assistant:home-assistant:0.96.4
-
cpe:2.3:a:home-assistant:home-assistant:0.96.5
-
cpe:2.3:a:home-assistant:home-assistant:0.97.0
-
cpe:2.3:a:home-assistant:home-assistant:0.97.1
-
cpe:2.3:a:home-assistant:home-assistant:0.97.2
-
cpe:2.3:a:home-assistant:home-assistant:0.98.0
-
cpe:2.3:a:home-assistant:home-assistant:0.98.1
-
cpe:2.3:a:home-assistant:home-assistant:0.98.2
-
cpe:2.3:a:home-assistant:home-assistant:0.98.3
-
cpe:2.3:a:home-assistant:home-assistant:0.98.4
-
cpe:2.3:a:home-assistant:home-assistant:0.98.5
-
cpe:2.3:a:home-assistant:home-assistant:0.99.0
-
cpe:2.3:a:home-assistant:home-assistant:0.99.1
-
cpe:2.3:a:home-assistant:home-assistant:0.99.2
-
cpe:2.3:a:home-assistant:home-assistant:2021.1.1
-
cpe:2.3:a:home-assistant:home-assistant:2021.1.2