CVE-2021-45099

Name of the Vulnerable Software and Affected Versions: Home Assistant Community Add-on: SSH & Web Terminal versions prior to 10.0.0

Description: The addon.stdin service has an attack surface that requires social engineering. Although the vendor does not agree that this is a vulnerability, addon.stdin was removed as a defense-in-depth measure against complex social engineering situations.

Recommendations: For versions prior to 10.0.0, consider removing or disabling the addon.stdin service as a defense-in-depth measure against complex social engineering situations.