Approved changes feed: RSS · Atom

cpe:2.3:o:hom.ee:brain_cube_core:2.28.4:*:*:*:*:*:*:*

part: o version: 2.28.4 update: *

VendorHom.Ee (1e58c401-bc29-55fc-adf3-4bcb423f393b)
ProductBrain Cube Core (6445ab5a-4e68-5e0c-aeb5-852e6a289d40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-24396 vulnerable 2026-06-08 05:22:32.996291 Details available
homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive SSH keys within downloadable and unencrypted firmware images. This allows remote attackers to use the support server as a SOCKS proxy.
Published: 2021-05-20T13:20:51.000Z
Updated: 2024-08-04T15:12:08.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24395 vulnerable 2026-06-08 05:22:32.994959 Details available
The USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an attacker with physical access to install compromised firmware. This occurs because of insufficient validation of the firmware image file and can lead to code execution on the device.
Published: 2021-05-20T13:24:53.000Z
Updated: 2024-08-04T15:12:08.767Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.