CVE-2019-25235 HIGH

CVE-2019-25235: Smartwares HOME easy 1.0.9 Client-Side Authentication Bypass via Web Pages

Vendor Smartwares
Product Smartwares HOME easy
Weakness CWE-639 · IDOR
Published December 24, 2025
Last update March 5, 2026
View on NVD All CVEs

CVSS base score

8.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

What the vulnerability does

01Description

Smartwares HOME easy 1.0.9 contains an authentication bypass vulnerability that allows unauthenticated attackers to access administrative web pages by disabling JavaScript. Attackers can navigate to multiple administrative endpoints and to bypass client-side validation and access sensitive system information.

Key dates

02Disclosure timeline

December 24, 2025 CVE published
March 5, 2026 Record updated