← voltar
CVE-2021-20990highCWE-306

Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 3.4%
probabilidade de exploração
3.4%top 12% das CVEs
exploração observada
nãonenhuma fonte reporta
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H