CVE-2021-20991 - OpenCVE

In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability.

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Complete

Integrity Impact Complete

Availability Impact Complete

AV:N/AC:L/Au:S/C:C/I:C/A:C

Vendors & Products
CPE Configurations

Vendors	Products
Fibaro	Home Center Lite Home Center 2 Home Center Lite Firmware Home Center 2 Firmware

Configuration 1 [-]

AND

cpe:2.3:o:fibaro:home_center_2_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:fibaro:home_center_2:-:*:*:*:*:*:*:*

Configuration 2 [-]

AND

cpe:2.3:o:fibaro:home_center_lite_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*

References

Link	Resource
http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html	Exploit Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2021/Apr/27	Mailing List Third Party Advisory
https://www.iot-inspector.com/blog/advisory-fibaro-home-center/	Exploit Third Party Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: CERTVDE

Published: 2021-04-15T00:00:00

Updated: 2021-04-20T17:06:18

Reserved: 2020-12-17T00:00:00

Link: CVE-2021-20991

JSON object: View

NVD Information

Status : Analyzed

Published: 2021-04-19T14:15:11.787

Modified: 2022-04-26T16:03:39.357

Link: CVE-2021-20991

JSON object: View

Redhat Information

No data.

CWE

{"containers": {"cna": {"affected": [{"product": "Fibaro Home Center", "vendor": "Fibar Group S.A", "versions": [{"lessThanOrEqual": "4.540", "status": "affected", "version": "Home Center 2", "versionType": "custom"}, {"lessThanOrEqual": "4.540", "status": "affected", "version": "Home Center Lite", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Marton Illes IoT Inspector Research Lab https://www.iot-inspector.com"}], "datePublic": "2021-04-15T00:00:00", "descriptions": [{"lang": "en", "value": "In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 OS Command Injection", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2021-04-20T17:06:18", "orgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "shortName": "CERTVDE"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/"}, {"name": "20210419 [CVE-2021-20989, CVE-2021-20990, CVE-2021-20991, CVE-2021-20992] Multiple vulnerabilities in Fibaro Home Center", "tags": ["mailing-list", "x_refsource_FULLDISC"], "url": "http://seclists.org/fulldisclosure/2021/Apr/27"}, {"tags": ["x_refsource_MISC"], "url": "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html"}], "source": {"discovery": "EXTERNAL"}, "title": "Fibaro Home Center Authenticated remote command execution", "x_generator": {"engine": "Vulnogram 0.0.9"}, "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "info@cert.vde.com", "DATE_PUBLIC": "2021-04-15T10:00:00.000Z", "ID": "CVE-2021-20991", "STATE": "PUBLIC", "TITLE": "Fibaro Home Center Authenticated remote command execution"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Fibaro Home Center", "version": {"version_data": [{"version_affected": "<=", "version_name": "Home Center 2", "version_value": "4.540"}, {"version_affected": "<=", "version_name": "Home Center Lite", "version_value": "4.540"}]}}]}, "vendor_name": "Fibar Group S.A"}]}}, "credit": [{"lang": "eng", "value": "Marton Illes IoT Inspector Research Lab https://www.iot-inspector.com"}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability."}]}, "generator": {"engine": "Vulnogram 0.0.9"}, "impact": {"cvss": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-78 OS Command Injection"}]}]}, "references": {"reference_data": [{"name": "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/", "refsource": "CONFIRM", "url": "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/"}, {"name": "20210419 [CVE-2021-20989, CVE-2021-20990, CVE-2021-20991, CVE-2021-20992] Multiple vulnerabilities in Fibaro Home Center", "refsource": "FULLDISC", "url": "http://seclists.org/fulldisclosure/2021/Apr/27"}, {"name": "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html", "refsource": "MISC", "url": "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html"}]}, "source": {"discovery": "EXTERNAL"}}}}, "cveMetadata": {"assignerOrgId": "270ccfa6-a436-4e77-922e-914ec3a9685c", "assignerShortName": "CERTVDE", "cveId": "CVE-2021-20991", "datePublished": "2021-04-15T00:00:00", "dateReserved": "2020-12-17T00:00:00", "dateUpdated": "2021-04-20T17:06:18", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.0"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fibaro:home_center_2_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5E54F03F-D990-48DD-8031-C009E4BE774B", "versionEndIncluding": "4.540", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:fibaro:home_center_2:-:*:*:*:*:*:*:*", "matchCriteriaId": "8021D17B-DD82-46D0-AE92-372649467F1F", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fibaro:home_center_lite_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "5A6A0A5C-DC0C-43B8-ACCD-8E2AB5530C79", "versionEndIncluding": "4.540", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:fibaro:home_center_lite:-:*:*:*:*:*:*:*", "matchCriteriaId": "6A19AFCC-B670-450C-8B64-7770C86B4692", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "In Fibaro Home Center 2 and Lite devices with firmware version 4.540 and older an authenticated user can run commands as root user using a command injection vulnerability."}, {"lang": "es", "value": "En dispositivos Fibaro Home Center versi\u00f3n 2 y Lite con versiones de firmware 4.540 y anteriores, un usuario autenticado puede ejecutar comandos como usuario root usando una vulnerabilidad de inyecci\u00f3n de comandos"}], "id": "CVE-2021-20991", "lastModified": "2022-04-26T16:03:39.357", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "COMPLETE", "baseScore": 9.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:S/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "info@cert.vde.com", "type": "Secondary"}]}, "published": "2021-04-19T14:15:11.787", "references": [{"source": "info@cert.vde.com", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "url": "http://packetstormsecurity.com/files/162243/Fibaro-Home-Center-MITM-Missing-Authentication-Code-Execution.html"}, {"source": "info@cert.vde.com", "tags": ["Mailing List", "Third Party Advisory"], "url": "http://seclists.org/fulldisclosure/2021/Apr/27"}, {"source": "info@cert.vde.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://www.iot-inspector.com/blog/advisory-fibaro-home-center/"}], "sourceIdentifier": "info@cert.vde.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-78"}], "source": "info@cert.vde.com", "type": "Secondary"}]}