CVE-2020-27199: Magic Home Pro Project Magic Home Pro

High severity, CVSS 7.5. EPSS: 2.9% chance of exploitation in the next 30 days.

The Magic Home Pro application 1.5.1 for Android allows Authentication Bypass. The security control that the application currently has in place is a simple Username and Password authentication function. Using enumeration, an attacker is able to forge a User specific token without the need for correct password to gain access to the mobile application as that victim user.

Affected products

Published 2020-12-17. Last modified 2026-06-17.