Home Assistant Community Add-On: Ssh & Web Terminal
Name of the Vulnerable Software and Affected Versions:
Home Assistant Community Add-on: SSH & Web Terminal versions prior to 10.0.0
Description:
The addon.stdin service has an attack surface that requires social engineering. Although the vendor does not agree that this is a vulnerability, addon.stdin was removed as a defense-in-depth measure against complex social engineering situations.
Recommendations:
For versions prior to 10.0.0, consider removing or disabling the addon.stdin service as a defense-in-depth measure against complex social engineering situations.