CVE-2020-3929

GeoVision Door Access Control Device - Shared cryptographic keys

State: Published
Severity: 5.9 Medium
Published: Jun 12, 2020
Updated: Sep 17, 2024
Reserved: Dec 20, 2019

Description

GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	twcert

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Door Access Control DeviceGeoVision	GV-AS210 through 2.21Affected GV-AS410 through 2.21Affected GV-AS810 through 2.21Affected GV-GF192x through 1.10Affected GV-AS1010 through 1.32Affected

References

https://www.twcert.org.tw/tw/cp-132-3696-6601c-1.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.