In Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older an internal management service is accessible on port 8000 and some API endpoints could be accessed without authentication to trigger a shutdown, a reboot or a reboot into recovery mode.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
fibaro home_center_2_firmware |
||
fibaro home_center_lite_firmware |