Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Magic Home Pro Project Subscribe
Filtered by product Magic Home Pro
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-27199 1 Magic Home Pro Project 1 Magic Home Pro 2020-12-22 5.0 MEDIUM 7.5 HIGH
The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for correct password to gain access to the mobile application as that victim user.