Night Owl Security Products Smart Doorbell Firmware 20190505
Approved changes feed: RSS · Atom
cpe:2.3:o:nightowlsp:smart_doorbell_firmware:20190505:*:*:*:*:*:*:*
part: o version: 20190505 update: *
| Vendor | Nightowlsp (5f0c3c72-6200-568f-944a-f4ffcd7fe9f6) |
|---|---|
| Product | Smart Doorbell Firmware (d5c15a5a-eb56-56ef-afa7-aa6ef14f8eb4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-28713 |
vulnerable | 2026-06-08 05:23:56.457280 |
Details available
Incorrect access control in push notification service in Night Owl Smart Doorbell FW version 20190505 allows remote users to send push notification events via an exposed PNS server. A remote attacker can passively record push notification events which are sent over an insecure web request. The web service does not authenticate requests, and allows attackers to send an indefinite amount of motion or doorbell events to a user's mobile application by either replaying or deliberately crafting false events.
Published: 2021-06-08T18:57:57.000Z
Updated: 2024-08-04T16:40:59.808Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.