Home Assistant Companion

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-44385 Oct 19, 23:15 HIGH This Week

The Home Assistant Companion for iOS and macOS app up to version 2023.4 are vulnerable to Client-Side Request Forgery. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE CSRF Apple Home Assistant Home Assistant Companion

NVD GitHub

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-41898 Oct 19, 23:15 HIGH This Week

Home assistant is an open source home automation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Google Code Injection Home Assistant Home Assistant Companion

NVD GitHub

CVSS 3.1

7.8

EPSS

0.2%

CVE-2023-44385

EPSS 0% CVSS 8.8

HIGH This Week

RCE CSRF Apple +2

NVD GitHub

CVE-2023-41898

EPSS 0% CVSS 7.8

HIGH This Week

Home assistant is an open source home automation. Rated high severity (CVSS 7.8), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

RCE Google Code Injection +2

NVD GitHub