{"id":107226,"date":"2023-03-11T06:48:11","date_gmt":"2023-03-11T04:48:11","guid":{"rendered":"https:\/\/prohoster.info\/?p=107226"},"modified":"2023-03-13T12:06:31","modified_gmt":"2023-03-13T10:06:31","slug":"udalyonno-ekspluatiruemaya-uyazvimost-v-platforme-home-assistant","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/udalyonno-ekspluatiruemaya-uyazvimost-v-platforme-home-assistant","title":{"rendered":"A remotely exploitable vulnerability in the Home Assistant platform","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
A critical vulnerability (CVE-2023-27482) has been discovered in the open home automation platform Home Assistant, allowing authentication bypass and full access to the privileged Supervisor API, through which settings can be changed, software can be installed\/updated, and add-ons and backups can be managed. <\/p>\n
The issue affects installations using the Supervisor component and has been present since its early releases (since 2017). For example, the vulnerability exists in Home Assistant OS and Home Assistant Supervised environments, but does not affect Home Assistant Container (Docker) or manually created Python environments based on Home Assistant Core. <\/p>\n
The vulnerability has been fixed in version Home Assistant Supervisor 2023.01.1. Additionally, a workaround has been included in the Home Assistant 2023.3.0 release. On systems where updating to block the vulnerability is not possible, access to the Home Assistant web service network port can be restricted from external networks. <\/p>\n
The method of exploiting the vulnerability is not yet detailed (developers estimate that about 1\/3 of users have installed the update, and many systems remain vulnerable). The corrected version includes changes under the guise of optimization in the processing of tokens and proxied requests, as well as added filters to block SQL injection, insertion of the tag , and the use of paths with ..\/ and \/.\/. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"