TI-2021-09279 CVE-2021-27952 · GHSA-3xpf-gg8x-9h3c
Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device.
Priority MEDIUM 44
Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device.
Ecobee
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Ecobee records in CISA KEVNo Ecobee vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2021-09281 CVE-2021-27954 · GHSA-gm95-7c28-qmq3
A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device…
Priority LOW 37
A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process.
TI-2021-09280 CVE-2021-27953 · GHSA-xfww-6hgp-m5c5
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in…
Priority LOW 36
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process.
TI-2018-04717 CVE-2018-6402 · GHSA-j5q8-22j2-m58f
Ecobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an…
Priority LOW 32
Ecobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an unencrypted Wi-Fi network with the same SSID, even if the device settings specify use of encryption such as WPA2, as long as the competin…