CVE-2020-7232: Evoko Home

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Evoko Home devices 1.31 through 1.37 allow remote attackers to obtain sensitive information (such as usernames and password hashes) via a WebSocket request, as demonstrated by the sockjs/224/uf1psgff/websocket URI at a wss:// URL.

Affected products

• Evoko Home: from 1.31, up to and including 1.37

Published 2020-01-19. Last modified 2026-06-17.