Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Fibar Group S.A Component: Home Center Lite Firmware Clear all filters
TI-2021-04098 CVE-2021-20992 · GHSA-pmqf-hcfv-43rc

Fibaro Home Center Unencrypted management interface

Priority LOW 38

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.01472 Published 2021-04-19 No fix listed CWE-319
TI-2021-04097 CVE-2021-20991 · GHSA-2v74-gvxm-8wmq

Fibaro Home Center Authenticated remote command execution

Priority MEDIUM 51

In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05565 Published 2021-04-19 No fix listed CWE-78
TI-2021-04095 CVE-2021-20989 · GHSA-j6x8-v233-x3mm

Fibaro Home Center Insufficient remote access server authorization

Priority LOW 30

Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.02054 Published 2021-04-19 No fix listed CWE-295