high8.2
CVE-2021-44905
Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthen…
Impact
Incorrect permissions in the Bluetooth Services in the Fortessa FTBTLD Smart Lock as of 12-13-2022 allows a remote attacker to disable the lock via an unauthenticated edit to the lock name.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cef | Fortessa Ftbtld Firmware | from 12-13-2022 |
Weakness classification
References
- NVD record
- CVE.org record
- https://ashallen.net/fortessa-ftbtld-smart-lock-allows-unauthorized-users-to-change-the-device-name-hilarity-ensues
- https://online.fliphtml5.com/fbwgm/fome/#p=20
- https://ashallen.net/fortessa-ftbtld-smart-lock-allows-unauthorized-users-to-change-the-device-name-hilarity-ensues
- https://online.fliphtml5.com/fbwgm/fome/#p=20