Login Request a demo
HC
Product
Home Center Lite Firmware
by Fibaro · last CVE Apr 19, 2021
4
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Home Center Lite Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-20991
8.8
5%
Apr 19
In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability
Affected: through 4.540
CVE-2021-20992
7.5
1%
Apr 19
In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol
Affected: All versions, or not specified
CVE-2021-20990
7.5
3%
Apr 19
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed…
Affected: through 4.600
CVE-2021-20989
5.9
2%
Apr 19
Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities
Affected: through 4.600
Showing 4