Plat'Home Co.,Ltd.
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| OpenBlocks IoT VX2 | 2 | – | Mar 4, 2020 |
| EasyBlocks IPv6 | 2 | – | Apr 8, 2020 |
| OpenBlocks IoT DX1 (FW5.0.x) | 1 | – | Jan 6, 2026 |
| OpenBlocks IoT EX/BX models (FW5.0.x) | 1 | – | Jan 6, 2026 |
| OpenBlocks IoT FX1 (FW5.0.x) | 1 | – | Jan 6, 2026 |
| OpenBlocks IoT VX2 (FW5.0.x) | 1 | – | Jan 6, 2026 |
| OpenBlocks IX9 models with FW (FW5.0.x) | 1 | – | Jan 6, 2026 |
| OpenBlocks IDM RX1 (FW5.0.x) | 1 | – | Jan 6, 2026 |
Exploited and recent CVEs
- CVE-2026-21411 Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password. 0.4%
- CVE-2026-21411 Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password. 0.4%
- CVE-2026-21411 Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password. 0.4%
- CVE-2026-21411 Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password. 0.4%
- CVE-2026-21411 Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password. 0.4%
- CVE-2026-21411 Authentication bypass issue exists in OpenBlocks series versions prior to FW5.0.8, which may allow an attacker to bypass administrator authentication and change the password. 0.4%
- CVE-2020-5550 Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows remote attackers to impersonate a registered user and log in the management conso 1.9%
- CVE-2020-5549 Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators v 0.9%
- CVE-2020-5536 OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors. 0.6%
- CVE-2020-5535 OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors. 0.9%