CVE-2017-16778

CVE-2017-16778 describes an access-control weakness in the DTMF tone receiver of the Fermax Outdoor Panel. Due to incorrect access-control logic, an attacker could inject a DTMF tone via the speaker unit to trigger an access grant and gain unauthorized physical access to a restricted floor/level....

CVE-2017-16778: Incorrect Authorization

An access control weakness in the DTMF tone receiver of Fermax Outdoor Panel allows physical attackers to inject a Dual-Tone-Multi-Frequency DTMF tone to invoke an access grant that would allow physical access to a restricted floor/level. By design, only a residential unit owner may allow such an...