CVE-2020-5535: Plathome Openblocks IoT VX2 Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.

Affected products

  • Plathome Openblocks IoT VX2 Firmware: from 3.3.0, before 4.0.0 (fixed in 4.0.0)

Published 2020-03-04. Last modified 2026-06-17.