Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2021-20992

Fibaro Home Center Unencrypted management interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fibar Group S.A Fibaro Home Center

  • Home Center 2 allaffected
  • Home Center Lite allaffected

References