CVE-2019-16258 - CVE House
Back to Database
Status published Medium CVE-2019-16258

The bootloader of the homee Brain Cube V2 through 2.23.0...

Vulnerability Description

The bootloader of the homee Brain Cube V2 through 2.23.0 allows attackers with physical access to gain root access by manipulating the U-Boot environment via the CLI after connecting to the internal UART interface.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16258

Credits & Attribution

No credits recorded in the NVD database.

References

More from hom.ee

View All →
CVE-2020-24396
homee Brain Cube v2 (2.28.2 and 2.28.4) devices have sensitive...
High 7.5
CVE-2020-24395
The USB firmware update script of homee Brain Cube v2...
Medium 6.8

Affected Vendor

Affected Software

brain cube core
Vulnerable Versions:
2.0.0

Timeline

Official Publish: March 20th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.