CVE-2020-7232

PoC —

CVSS 3.1

7.5 high

EPSS

1%p73

Published

Jan 19, 2020 (Jan 19, 2020)

Modified

Jun 17, 2026

Description

Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL.

Vendors: evoko
Products: home
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.