CVE-2020-12681
High
Description
Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.
SeverityHigh
CVSS7.5
Exploit probability—
Product3xlogic Infinias Eidc32 Firmware
PublishedJul 26, 2021
First seenJul 26, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 3xlogic infinias_eidc32_firmware | v ≤ 3.4.125 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.