TI-2021-09279 CVE-2021-27952 · GHSA-3xpf-gg8x-9h3c
Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device.
Priority MEDIUM 44
Hardcoded default root credentials exist on the ecobee3 lite 4.5.81.200 device.
Ecobee
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Ecobee records in CISA KEVNo Ecobee vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
3 records in Ecobee3 Lite Firmware · all components
TI-2021-09281 CVE-2021-27954 · GHSA-gm95-7c28-qmq3
A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device…
Priority LOW 37
A heap-based buffer overflow vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HKProcessConfig function of the HomeKit Wireless Access Control setup process.
TI-2021-09280 CVE-2021-27953 · GHSA-xfww-6hgp-m5c5
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in…
Priority LOW 36
A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process.