Description
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://jvn.jp/en/jp/JVN19666251/index.html
Vendor Advisory x_refsource_misc
https://www.plathome.co.jp/software/vx2-v4-0-0/
Scores
CVSS v3
8.8
EPSS
0.0058
EPSS Percentile
43.2%
Attack Vector
ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-287
Status
published
Products (1)
plathome/openblocks_iot_vx2_firmware
3.3.0 - 4.0.0
Published
Mar 04, 2020
Tracked Since
Feb 18, 2026