CVE-2021-20991

CVE-2021-20991 affects Fibaro Home Center 2 and Lite devices with firmware 4.540 and older. An authenticated user can perform command injection to execute commands as root. Connected docs corroborate remote command execution and MITM-related disclosures for Fibaro Home Center products; no explici...

CVE-2021-20990

Fibaro Home Center 2 and Lite devices with firmware 4.600 and older expose an internal management service on port 8000 that can be accessed without authentication to trigger shutdown, reboot, or reboot into recovery mode. A fix is available in newer firmware (e.g., 4.610); implementing an upgrade...