HomeAutomation v3.3.2 Authentication Bypass Vulnerability (CVE-2020-22001)

Key Information Summary Vulnerability Title HomeAutomation v3.3.2 Authentication Bypass Exploit Vulnerability Details Advisory ID: ZSL-2019-5557 Type: Local/Remote Impact: Security Bypass Risk: 4/5 Release Date: 29.12.2019 Vulnerability Description Summary: The application is vulnerable to an issue where spoofing a client's IP address with the local IP address value allows remote control of the smart home solution. Affected Versions Affected Version: 3.3.2 Test Environment Tested On: - Apache/2.4.41 (centos) OpenSSL/1.0.2k-fips - Apache/2.4.29 (Ubuntu) - PHP/7.3.11 - PHP 7.2.24-0ubuntu0.18.04.1 Vendor Response Vendor Status: - 06.11.2019: Vulnerability discovered - 07.11.2019: Vendor contacted - 29.11.2019: No response - 30.11.2019: Vendor contacted again - 28.12.2019: No response - 29.12.2019: Security advisory publicly released Evidence and Credits PoC: homeautomation_authbypass.txt Credits: Vulnerability discovered by Gjoko Krstic - References [1]: https://www.exploit-db.com/exploits/47807 [2]: https://packetstormsecurity.com/files/155789/HomeAutomation-3.3.2-Authentication-Bypass.html [3]: https://cxsecurity.com/issue/WLB-2019120139 [4]: https://exchange.xforce.ibmcloud.com/vulnerabilities/173658 [5]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-22001 [6]: https://nvd.nist.gov/vuln/detail/CVE-2020-22001 [7]: https://www.incibe-cert.es/en/early-warning/vulnerabilities/cve-2020-22001 Changelog Changelog: - 29.12.2019: Initial release - 24.01.2020: Added references [1], [2], [3], and [4] - 19.06.2021: Added references [5], [6], and [7] Contact Contact: Zero Science Lab - Web: http://www.zeroscience.mk - e-mail: lab@zeroscience.mk

Goal Reached Thanks to every supporter — we hit 100%!

HomeAutomation v3.3.2 Authentication Bypass Vulnerability (CVE-2020-22001)