CVE-2019-16258 - The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface

Back Back to CVE browser

MEDIUM

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface

Published Mar 20, 2020

6.8

MEDIUM

CVSS 3.1

EPSS 0.30%

Description

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

https://store.hom.ee/collections/all/products/homee-brain-cube
x_refsource_MISCProductVendor Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-026.txt
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://store.hom.ee/collections/all/products/homee-brain-cube		x_refsource_MISCProductVendor Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2019-026.txt		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 20, 2020

Updated Aug 5, 2024

Reserved Sep 12, 2019

Link CVE-2019-16258

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2019-16258

Red Hat

Severity n/a

Public date n/a

Links CVE-2019-16258