Fibaro Home Center 2
4 CVEs affecting Fibaro Home Center 2. Latest disclosed: 2021-04-19. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20991 | Critical | 9.8 | 2021-04-19 | In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vu… |
CVE-2021-20992 | High | 8.1 | 2021-04-19 | In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the use… |
CVE-2021-20990 | High | 7.5 | 2021-04-19 | In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints… |
CVE-2021-20989 | Medium | 5.9 | 2021-04-19 | Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote su… |