CVE-2021-20991

Description

In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability.

h fibaro home_center_2 -*******

o fibaro home_center_lite_firmware ********

h fibaro home_center_lite -*******

References

https://www.iot-inspector.com/blog/advisory-fibaro-home-center/

ExploitThird Party Advisory

20210419 [CVE-2021-20989, CVE-2021-20990, CVE-2021-20991, CVE-2021-20992] Multiple vulnerabilities in Fibaro Home Center

Mailing ListThird Party Advisory

http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

CvssV3 impact

BaseSeverity	HIGH
ConfidentialityImpact	HIGH
AttackComplexity	LOW
Scope	UNCHANGED
AttackVector	NETWORK
AvailabilityImpact	HIGH
IntegrityImpact	HIGH
PrivilegesRequired	LOW
BaseScore	8.8
VectorString	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Version	3.1
UserInteraction	NONE

CvssV2 impact

AccessComplexity	LOW
ConfidentialityImpact	COMPLETE
AvailabilityImpact	COMPLETE
IntegrityImpact	COMPLETE
BaseScore	9
VectorString	AV:N/AC:L/Au:S/C:C/I:C/A:C
Version	2.0
AccessVector	NETWORK
Authentication	SINGLE