Executive brief
eNet SMART HOME server is a management platform for residential and commercial smart home automation systems. A privilege escalation vulnerability allows low-privilege users to elevate their accounts to administrator status through a crafted API request, enabling attackers to modify device configurations, network settings, and potentially compromise the entire smart home infrastructure including connected devices and user data.
Technical details
The vulnerability is an authorization bypass in the setUserGroup JSON-RPC method due to insufficient access control checks. A low-privileged user (UG_USER) can send a POST request to the /jsonrpc/management endpoint with their own username to escalate their group membership to UG_ADMIN without proper authorization validation. The vulnerability requires network access to the JSON-RPC interface and authentication as a low-privilege user. Successful exploitation grants administrative privileges, allowing modification of device configurations, network settings, and other system-critical functions. Patches for affected versions 2.2.1 and 2.3.1 should be available from the vendor.
Affected products
- eNet SMART HOME server 2.2.1, 2.3.1
Timeline
- 2026-02-15: disclosed