CVE-2011-4837 describes a Cross-Site Request Forgery (CSRF) vulnerability in the HomeSeer HS2 web interface, specifically affecting version 2.5.0.20. This flaw allows remote attackers to hijack an administrator's authenticated session to execute arbitrary programs on the affected system. The vulnerability has a CVSS score of 6.8, indicating a medium severity, and is relatively easy to exploit remotely with moderate attack complexity, potentially leading to partial confidentiality, integrity, and availability compromise. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an ExploitDB entry exists (EDB-18567) detailing multiple vulnerabilities in HomeSeer HS2, suggesting proof-of-concept code may be available. Community discussion and media coverage for this CVE are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2.5.0.20CPE matchmatch criteria | cpe:2.3:a:homeseer:homeseer_hs2:2.5.0.20:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:M/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.