EveHome Eve Play Password Hash Vulnerability Leading to Arbitrary Code Execution
Vulnerability
A vulnerability allowing arbitrary code execution has been identified in EveHome Eve Play versions through 1.1.42. This issue arises from the use of password hashes that require insufficient computational effort, which an attacker could exploit.
Impact
Exploitation of this vulnerability could lead to unauthorized arbitrary code execution on the affected device.
Remediation
Users can upgrade to Eve Play version 1.1.43, which addresses this vulnerability by improving input validation.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
7.5exploitability
7.4remediation
7.7relevance
0.0threat
0.0urgency
2.9incentive
5.0Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.