Smart Home
Monthly
Credential exposure in Rently Smart Home versions 20.1.0 and prior allows authenticated network-based attackers to retrieve all property access PINs, including the Master Pin that overrides the standard user permission hierarchy. Reported by ICS-CERT via CISA advisory ICSA-26-237-01, the flaw is particularly severe in property rental contexts where Master Pin retrieval translates directly to unauthorized physical access to tenant properties. No public exploit code has been identified at time of analysis, but the low attack complexity and network-accessible vector make this a genuine operational and physical security risk.
Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.
Credential exposure in Rently Smart Home versions 20.1.0 and prior allows authenticated network-based attackers to retrieve all property access PINs, including the Master Pin that overrides the standard user permission hierarchy. Reported by ICS-CERT via CISA advisory ICSA-26-237-01, the flaw is particularly severe in property rental contexts where Master Pin retrieval translates directly to unauthorized physical access to tenant properties. No public exploit code has been identified at time of analysis, but the low attack complexity and network-accessible vector make this a genuine operational and physical security risk.
Improper certificate validation for certain connections in the Bosch Smart Home System App for iOS prior to version 9.17.1 potentially allows to intercept video contents by performing a. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.