CVE-2020-3929 MEDIUM

CVE-2020-3929: GeoVision Door Access Control Device - Shared cryptographic keys

Vendor Geovision
Product Door Access Control Device
Published June 12, 2020
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.9/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

What the vulnerability does

01Description

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.

Key dates

02Disclosure timeline

June 12, 2020 CVE published
September 17, 2024 Record updated