Core Platform vulnerabilities

2 known vulnerabilities in Core Platform from Taphome. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  Core Platform: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-2760Jul 17, 2023Taphome

  An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version 2023.2, allowing low privileged users to inject arbitrary SQL directives into an SQL query and execute arbitrary SQL commands and get full

• 8.8 High severity

  Core Platform: Incorrect Authorization

  CVE-2023-2759Jul 17, 2023Taphome

  A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability.