VulnerabilityModified
CVE-2020-3929
Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
MEDIUM 5.9EPSS 0.51%
Does this matter?
Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own.
Description
GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.51% probability · 42th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-326
- Affected
- usavisionsys/geovision gv-as210 firmware · usavisionsys/geovision gv-as410 firmware · usavisionsys/geovision gv-as810 firmware · usavisionsys/geovision gv-as1010 firmware · usavisionsys/geovision gv-gf192x firmware
- Source
- twcert@cert.org.tw
References
- https://www.twcert.org.tw/tw/cp-132-3696-6601c-1.htmlThird Party Advisory
- https://www.twcert.org.tw/tw/cp-132-3696-6601c-1.htmlThird Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.