Homeseer: Security Vulnerabilities
Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors.
CVSS Score
7.5
EPSS Score
0.06
Published
2011-12-15
Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI.
CVSS Score
4.3
EPSS Score
0.018
Published
2011-12-15
Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs.
CVSS Score
6.8
EPSS Score
0.003
Published
2011-12-15