Homey Pro Firmware

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:o:homey:homey_pro_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorHomey (6e9caccc-3ff1-5820-a607-2e8dc792f1b5)
ProductHomey Pro Firmware (bc609be6-a4cd-5547-9687-907648e00c07)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-9462 vulnerable 2026-06-08 05:28:01.775893 Details available
An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.
Published: 2020-06-04T15:49:28.000Z
Updated: 2024-08-04T10:26:16.121Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-28952 vulnerable 2026-06-08 05:23:56.662875 Details available
An issue was discovered on Athom Homey and Homey Pro devices before 5.0.0. ZigBee hub devices should generate a unique Standard Network Key that is then exchanged with all enrolled devices so that all inter-device communication is encrypted. However, the cited Athom products use another widely known key that is designed for testing purposes: "01030507090b0d0f00020406080a0c0d" (the decimal equivalent of 1 3 5 7 9 11 13 15 0 2 4 6 8 10 12 13), which is human generated and static across all issued devices.
Published: 2021-03-09T19:31:33.000Z
Updated: 2024-08-04T16:48:01.456Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.