CVE-2020-22001

CVE-2020-22001 describes an authentication bypass vulnerability in HomeAutomation 3.3.2, allowing remote control of the smart home solution. This critical vulnerability, with a CVSS score of 9.8, can be exploited by spoofing the client's IP address using the X-Forwarded-For header with a local loopback IP value, requiring no user interaction or prior authentication. While no public exploits or active exploitation have been observed, and community discussion is minimal, the high severity and ease of exploitation warrant attention.