Fibaro Home Center Lite Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Fibaro Home Center Lite Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2021-20991 — CVSS 9.8 (critical): In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a…
• CVE-2021-20992 — CVSS 8.1 (high): In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol…
• CVE-2021-20990 — CVSS 7.5 (high): In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000…
• CVE-2021-20989 — CVSS 5.9 (medium): Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote…