Skip to content
OpenAdvisories

Vendor

openhab

6 known vulnerabilities.

Products

openhab-webui 4 openhab-addons 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.7
    CVE-2020-5242

    openHAB exec add-ons allow remote arbitrary command execution

    openHAB before 2.5.2 allow a remote attacker to use REST calls to install the EXEC binding or EXEC transformation service and execute arbitrary commands on the system with the privileges of the user running openHAB. Starting with version 2.5.2 all commands ne…

    openhab openhab-addons