Vulnerabilities > Fibaro > Home Center 2 Firmware > High

DATE CVE VULNERABILITY TITLE RISK
2021-04-19 CVE-2021-20992 Cleartext Transmission of Sensitive Information vulnerability in Fibaro Home Center 2 Firmware and Home Center Lite Firmware
In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol.
network
low complexity
fibaro CWE-319
7.5
2021-04-19 CVE-2021-20991 Command Injection vulnerability in Fibaro Home Center 2 Firmware and Home Center Lite Firmware
In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability.
network
low complexity
fibaro CWE-77
8.8