CVE-2020-12681

  • Last update: Apr 13, 2023

Description

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.

Software From Fixed in
3xlogic / infinias_eidc32_firmware - 3.4.125.x

Details

    • Severity: High
  • CVE: CVE-2020-12681
  • Published: Jul 26, 2021
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v2

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:N/I:P/A:N

CWEs

OWASP TOP 10