CVE-2021-20991

🗓️ 19 Apr 2021 14:05:02Reported by CERTVDEType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 81 Views

Command injection vulnerability in Fibaro Home Center 2 and Lite devices allows authenticated users to run commands as root.

Reporter	Title	Published	Views	Family All 7
0day.today	Fibaro Home Center MITM / Missing Authentication / Code Execution Vulnerabilities	20 Apr 202100:00	–	zdt
Circl	CVE-2021-20991	23 Apr 202111:02	–	circl
CNNVD	FIBARO Home Center 2 命令注入漏洞	19 Apr 202100:00	–	cnnvd
Cvelist	CVE-2021-20991 Fibaro Home Center Authenticated remote command execution	19 Apr 202114:05	–	cvelist
NVD	CVE-2021-20991	19 Apr 202114:15	–	nvd
Packet Storm	Fibaro Home Center MITM / Missing Authentication / Code Execution	20 Apr 202100:00	–	packetstorm
Prion	Command injection	19 Apr 202114:15	–	prion

NVD

Vulners

Node

fibaro home_center_2_firmwareRange≤4.540

AND

fibaro home_center_2Match-

Node

fibaro home_center_lite_firmwareRange≤4.540

AND

fibaro home_center_liteMatch-

[
  {
    "product": "Fibaro Home Center",
    "vendor": "Fibar Group S.A",
    "versions": [
      {
        "lessThanOrEqual": "4.540",
        "status": "affected",
        "version": "Home Center 2",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "4.540",
        "status": "affected",
        "version": "Home Center Lite",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2021/Apr/27
packetstormsecurity	www.packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html
iot-inspector	www.iot-inspector.com/blog/advisory-fibaro-home-center/

21 Nov 2024 05:47Current

9.4High risk

Vulners AI Score9.4

CVSS 3.18.8 - 9.8

CVSS 29

EPSS0.34187