CVE-2020-24395 | BDVDB-2026-154015 Detail

Description#

The USB firmware update script of homee Brain Cube v2 (2.28.2 and 2.28.4) devices allows an attacker with physical access to install compromised firmware. This occurs because of insufficient validation of the firmware image file and can lead to code execution on the device.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.syss.de/pentest-blog/
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-026.txt

Exploit#

No public exploit known

History#

Version 12021-05-20Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.