Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v9vj-vpg8-vqmj

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.

In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.

EPSS

Процентиль: 82%
0.01763
Низкий

7.5 High

CVSS3

Дефекты

CWE-306
CWE-863

Связанные уязвимости

CVSS3: 7.5
nvd
почти 5 лет назад

In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.

EPSS

Процентиль: 82%
0.01763
Низкий

7.5 High

CVSS3

Дефекты

CWE-306
CWE-863