Detections
Analytics

CVE-2020-24396

high

Description

homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy.

References

https://www.syss.de/pentest-blog/

https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-027.txt

https://cwe.mitre.org/data/definitions/522.html

Details

Source: Mitre, NVD

Published: 2021-05-20

Updated: 2022-10-05

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00472