https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 18:11:31 +0000 https://cve.radiocsirt.org/vuln/cnvd-2020-22305 cnvd-2020-22305 https://cve.radiocsirt.org/vuln/cnvd-2020-22305 https://cve.radiocsirt.org/vuln/euvd-2026-171672 EUVD-2026-171672 https://cve.radiocsirt.org/vuln/euvd-2026-171672 https://cve.radiocsirt.org/vuln/fkie_cve-2019-11061 <p>A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).</p> <p>A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication. CVSS 3.0 base score 10 (Confidentiality, Integrity and Availability impacts). CVSS vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-11061 https://cve.radiocsirt.org/vuln/ghsa-qwvg-w866-x6c3 <p>A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication.</p> <p>A broken access control vulnerability in HG100 firmware versions up to 4.00.06 allows an attacker in the same local area network to control IoT devices that connect with itself via http://[target]/smarthome/devicecontrol without any authentication.</p> https://cve.radiocsirt.org/vuln/ghsa-qwvg-w866-x6c3 https://cve.radiocsirt.org/vuln/gsd-2019-11061 gsd-2019-11061 https://cve.radiocsirt.org/vuln/gsd-2019-11061