Description
In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Control API because there are only 1.7 million possibilities.
Unscored
CVE-2020-35585
EUVD-2020-23251GHSA-w6cg-v47q-5p36
In Solstice Pod before 3.3.0 (or Open4.3), the screen key can be enumerated using brute-force attacks via the /lookin/info Solstice Open Co…
Published Dec 23, 2020 · Updated Aug 4, 2024 · Assigned by mitre