Fibaro Home Center Lite
Approved changes feed: RSS · Atom
cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Fibaro (b456e0b4-54f0-5fe3-9c0a-5c385ec42039) |
|---|---|
| Product | Home Center Lite (14c55532-59df-59fa-9801-5710d4cd2d5d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-20992 |
not_vulnerable | 2026-06-08 05:29:11.023384 |
Fibaro Home Center Unencrypted management interface
HIGH (8.1)
In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.
Published: 2021-04-19T14:05:02.730Z
Updated: 2024-09-17T02:36:30.816Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20991 |
not_vulnerable | 2026-06-08 05:29:11.022898 |
Fibaro Home Center Authenticated remote command execution
CRITICAL (9.8)
In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability.
Published: 2021-04-19T14:05:02.629Z
Updated: 2024-09-16T17:42:55.068Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20990 |
not_vulnerable | 2026-06-08 05:29:11.022274 |
Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode
HIGH (7.5)
In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.
Published: 2021-04-19T14:05:02.510Z
Updated: 2024-09-16T16:42:28.116Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-20989 |
not_vulnerable | 2026-06-08 05:29:11.021464 |
Fibaro Home Center Insufficient remote access server authorization
MEDIUM (5.9)
Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device initiated remote port-forward channel can be used to connect to the web management interface. Knowledge of authorization credentials to the management interface is required to perform any further actions.
Published: 2021-04-19T14:05:02.362Z
Updated: 2024-09-17T00:42:24.901Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.