CVE-2020-3929

GeoVision Door Access Control Device - Shared cryptographic keys

Medium · published June 12, 2020

CVSS v3.1
5.9
EPSS
1%
Percentile
42.3
In the wild
Unconfirmed
What it is

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00507 · 42.3th percentile
Published
2020-06-12T08:25Z
EPSS history
Timeline
  • 12 JUN 08:25Z
    GeoVision Door Access Control Device - Shared cryptographic keys
    cvelistv5