CVE-2011-4837 Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrar...
MediumCVSS 6.8
EPSS 1.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| homeseer hs2 | = 2.5.0.20 | No fix listed |
References
- VU#796883 third-party-advisory us-government-resource