GCVE - cpe:2.3:a:homeseer:homeseer_hs2:2.5.0.20:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:homeseer:homeseer_hs2:2.5.0.20:*:*:*:*:*:*:*

part: a version: 2.5.0.20 update: *

Vendor	Homeseer (`c403b2cc-9dce-5ec8-ae71-9ac08fcf99c6`)
Product	Homeseer Hs2 (`86ea7bfb-a4f3-52f0-9f2a-cd06584b8639`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4837`	vulnerable	2026-06-08 04:59:33.256098	Details available Cross-site request forgery (CSRF) vulnerability in /ctrl in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to hijack the authentication of admins for requests that execute arbitrary programs. Published: 2011-12-15T02:00:00.000Z Updated: 2024-09-17T00:26:57.558Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/796883	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4836`	vulnerable	2026-06-08 04:59:33.255808	Details available Cross-site scripting (XSS) vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to inject arbitrary web script or HTML via a request for a crafted URI. Published: 2011-12-15T02:00:00.000Z Updated: 2024-09-17T01:32:03.547Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/796883	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4835`	vulnerable	2026-06-08 04:59:33.255440	Details available Directory traversal vulnerability in the web interface in HomeSeer HS2 2.5.0.20 allows remote attackers to access arbitrary files via unspecified vectors. Published: 2011-12-15T02:00:00.000Z Updated: 2024-09-16T21:07:32.833Z Open on db.gcve.eu Reference links http://www.kb.cert.org/vuls/id/796883	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.