CVE-2020-12681

High

Description

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.

SeverityHigh
CVSS7.5
Exploit probability—
Product3xlogic Infinias Eidc32 Firmware
PublishedJul 26, 2021
First seenJul 26, 2021

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
3xlogic infinias_eidc32_firmwarev ≤ 3.4.125—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-12681 · 3xlogic Infinias Eidc32 Firmware · Dark Radar