CVE-2021-20989: Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote…

PriorityP336medium5.9CVSS 3.1

AVNACHPRNUINSUCHINAN

EPSS

1.98%

78.1th percentile

Fibaro Home Center 2 and Lite devices with firmware version 4.600 and older initiate SSH connections to the Fibaro cloud to provide remote access and remote support capabilities. This connection can be intercepted using DNS spoofing attack and a device initiated remote port-forward channel can be used to connect to the web management interface. Knowledge of authorization credentials to the management interface is required to perform any further actions.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
fibar_group_s.a	fibaro_home_center	Home Center 2 – 4.600	—
fibar_group_s.a	fibaro_home_center	Home Center Lite – 4.600	—
fibaro	home_center_2_firmware	<= 4.600	—
fibaro	home_center_lite_firmware	<= 4.600	—

CVSS provenance

nvdv3.15.9MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.