CVE-2021-20992: Fibaro Home Center 2 Firmware
High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.
In Fibaro Home Center 2 and Lite devices in all versions provide a web based management interface over unencrypted HTTP protocol. Communication between the user and the device can be eavesdropped to hijack sessions, tokens and passwords.
Affected products
Published 2021-04-19. Last modified 2026-06-17.