Skip to content
OpenAdvisories

Vendor

Fibar Group

5 known vulnerabilities.

Products

Fibaro Home Center 4 Home Center 3 1 Home Center 2 1 Home Center Lite 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2020-36905

    FIBARO System Home Center 5.021 Remote File Inclusion via Proxy API

    FIBARO System Home Center 5.021 contains a remote file inclusion vulnerability in the undocumented proxy API that allows attackers to include arbitrary client-side scripts. Attackers can exploit the 'url' GET parameter to inject malicious JavaScript and poten…

    Fibar Group Home Center Lite Home Center 2 Home Center 3
  • High 7.5
    CVE-2021-20990

    Fibaro Home Center Unauthenticated access to shutdown, reboot and reboot to recovery mode

    In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery …

    Fibar Group Fibaro Home Center
  • High 8.1
    CVE-2021-20992

    Fibaro Home Center Unencrypted management interface

    In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.

    Fibar Group Fibaro Home Center