CVE-2020-28713

Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The we...

CVE-2020-28713: Authentication Bypass by Capture-replay

Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The we...

PT-2021-11580

Name of the Vulnerable Software and Affected Versions: Night Owl Smart Doorbell FW version 20190505 Description: The issue is related to incorrect access control in the push notification service, allowing remote users to send push notification events via an exposed PNS server. A remote attacker c...