Skip to content
OpenAdvisories
Critical · 9.8 CVE-2024-5743 EUVD-2024-47157GHSA-725v-vjc6-h9fq

Command Injection Vulnerability

Published Jan 13, 2025 · Updated Jan 13, 2025 · Assigned by ABB

Description

An attacker could exploit the 'Use of Password Hash With Insufficient Computational Effort' vulnerability in EveHome Eve Play to execute arbitrary code.

This issue affects Eve Play: through 1.1.42.

Affected products

VendorProductAffectedFixed
EveHome Eve Play ≤ 1.1.42 —

References