CVE-2020-9462 - An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0

Back Back to CVE browser

MEDIUM

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0

Published Jun 4, 2020

4.3

MEDIUM

CVSS 3.1

EPSS 0.33%

Description

An issue was discovered in all Athom Homey and Homey Pro devices up to the current version 4.2.0. An attacker within RF range can obtain a cleartext copy of the network configuration of the device, including the Wi-Fi PSK, during device setup. Upon success, the attacker is able to further infiltrate the target's Wi-Fi networks.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-312

References (1)

https://developer.athom.com/firmware
x_refsource_MISCRelease NotesVendor Advisory

Link	Providers	Tags
https://developer.athom.com/firmware		x_refsource_MISCRelease NotesVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 4, 2020

Updated Aug 4, 2024

Reserved Feb 28, 2020

Link CVE-2020-9462

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-9462

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-9462