CVE-2020-21997

Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability

published April 29, 2021

CVSS
—
EPSS
3%
Percentile
85.8
In the wild
Unconfirmed
What it is

Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability. An attacker could disclose sensitive and clear-text information resulting in authentication bypass, session hijacking and full system control.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02717 · 85.8th percentile
Published
2021-04-29T14:17Z
EPSS history
Timeline
  • 29 APR 14:17Z
    Smartwares HOME easy <=1.0.9 is vulnerable to an unauthenticated database backup download and information disclosure vulnerability
    cvelistv5