Skip to content

Vendor

TAPHOME vulnerabilities

2 published CVES affecting TAPHOME, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of TAPHOME alerts

Products

Latest TAPHOME CVEs

Newest publication first

  1. CVE-2023-2760 TAPHOME SQL Injection in Core Platform

    Published
    HighCVSS 7.6 EPSS 0.43%

    An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version 2023.2, allowing low privileged users to inject arbitrary SQL directives into an SQL query and execute arbitrary SQL commands and get full reading access. This...

  2. CVE-2023-2759 TAPHOME Improper Authentication in Core Platform

    Published
    HighCVSS 8.8 EPSS 0.56%

    A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.