Lucene search

MitreCVE-2021-27953

HistoryAug 03, 2021 - 3:15 p.m.

CVE-2021-27953

2021-08-0315:15:08

CWE-476

mitre

web.nvd.nist.gov

cve-2021-27953

null pointer dereference

ecobee3 lite

denial of service

http request

nvd

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.5%

JSON

A NULL pointer dereference vulnerability exists on the ecobee3 lite 4.5.81.200 device in the HomeKit Wireless Access Control setup process. A threat actor can exploit this vulnerability to cause a denial of service, forcing the device to reboot via a crafted HTTP request.

Affected configurations

Nvd

Node

ecobeeecobee3_liteMatch-

AND

ecobeeecobee3_lite_firmwareMatch4.5.81.200

VendorProductVersionCPE
ecobeeecobee3_lite-cpe:2.3:h:ecobee:ecobee3_lite:-:*:*:*:*:*:*:*
ecobeeecobee3_lite_firmware4.5.81.200cpe:2.3:o:ecobee:ecobee3_lite_firmware:4.5.81.200:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ecobee	ecobee3_lite	-	cpe:2.3:h:ecobee:ecobee3_lite:-:::::::*
ecobee	ecobee3_lite_firmware	4.5.81.200	cpe:2.3:o:ecobee:ecobee3_lite_firmware:4.5.81.200:::::::*

References

www.l9group.com/advisories/remote-denial-of-service-of-ecobee3-lite

Social References

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.002

Percentile

59.5%

JSON

Related for CVE-2021-27953