CVE-2021-20989mediumCWE-295

CVE-2021-20989: falha de média gravidade em Fibaro Home Center

Fibaro Home Center Insufficient remote access server authorization

Publicada em · Atualizada em

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.9epss 2.0%
probabilidade de exploração
2.0%top 20% das CVEs
exploração observada
nãonenhuma fonte reporta
Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device initiated remote port-forward channel can be used to connect to the web management interface. Knowledge of authorization credentials to the management interface is required to perform any further actions.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Produtos afetados
Fibar Group S.A · Fibaro Home Center
CVEs relacionadas — Fibaro Home Center

No mesmo produto, das mais perigosas para as menos.

CVE-2021-20991CRITICALFibaro Home Center Authenticated remote command executionEPSS 5.4%CVE-2021-20990HIGHFibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery modeEPSS 3.4%CVE-2021-20992HIGHFibaro Home Center Unencrypted management interfaceEPSS 1.4%
Referências
http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.htmlhttp://seclists.org/fulldisclosure/2021/Apr/27https://www.iot-inspector.com/blog/advisory-fibaro-home-center/