CVE-2020-24396

homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images

published May 20, 2021

CVSS
—
EPSS
2%
Percentile
78.9
In the wild
Unconfirmed
What it is

homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01850 · 78.9th percentile
Published
2021-05-20T13:20Z
EPSS history
Timeline
  • 20 MAY 13:20Z
    homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images
    cvelistv5