CVE-2020-12488CWE-284

Broken Access Control Vulnerability in Jovi Smart Scene

Medium · published November 10, 2021

CVSS v3.1
5.5
EPSS
0%
Percentile
10.3
In the wild
Unconfirmed
What it is

The attacker can access the sensitive information stored within the jovi Smart Scene module by entering carefully constructed commands without requesting permission.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00208 · 10.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2021-11-10T15:49Z
EPSS history
Timeline
  • 10 NOV 15:49Z
    Broken Access Control Vulnerability in Jovi Smart Scene
    cvelistv5