CVE-2021-20992CWE-319

Fibaro Home Center Unencrypted management interface

High · published April 19, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
72.6
In the wild
Unconfirmed
What it is

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01421 · 72.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2021-04-19T14:05Z
EPSS history
Timeline
  • 19 APR 14:05Z
    Fibaro Home Center Unencrypted management interface
    cvelistv5