CVE-2020-8790 in Mobile Companion App

Résumé

par MITRE

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Réserver: 07/02/2020
• Modérer: accepté
• Entrée: VDB-154736
• CPE: prêt
• CWE: CWE-521 (confirmé)
• CVSS: 9.8 (NVD)
• EPSS: 0.01654
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-8790
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-8790
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-8790/