Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 7.5epss 3.4%
exploitation probability
3.4%top 12% of all CVEs
observed exploitation
nono source reports it
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
Fibar Group S.A · Fibaro Home Center