Vulnerabilities > Homeautomation Project > Critical

DATE CVE VULNERABILITY TITLE RISK
2021-04-27 CVE-2020-22001 Authentication Bypass by Spoofing vulnerability in Homeautomation Project Homeautomation 3.3.2
HomeAutomation 3.3.2 suffers from an authentication bypass vulnerability when spoofing client IP address using the X-Forwarded-For header with the local (loopback) IP address value allowing remote control of the smart home solution.
network
low complexity
homeautomation-project CWE-290
critical
 9.8
9.8