HO
Product
Hono
by Eclipse · last CVE Jan 14, 2021
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch

Add Hono to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-27220
8.8
1%
Jan 14
The Eclipse Hono AMQP and MQTT protocol adapters do not check whether an authenticated gateway device is authorized to receive command & control messages when it has subscribed…
Affected: 1.4.0 through 1.4.4; 1.5.0
CVE-2020-27217
7.5
1%
Nov 13
In Eclipse Hono version 1.3.0 and 1.4.0 the AMQP protocol adapter does not verify the size of AMQP messages received from devices
Affected: 1.3.0; 1.4.0
Showing 2