PT-2020-20280
CVE-2020-8790
·
Published
2020-05-04
·
Updated
2021-07-21
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
OKLOK mobile companion app version 3.1.1
Fingerprint Bluetooth Padlock FB50 version 2.3
Description
The issue is related to weak password requirements and improper restriction of excessive authentication attempts. This could allow a remote attacker to discover user credentials and obtain access via a brute force attack.
Recommendations
For OKLOK mobile companion app version 3.1.1, consider implementing stronger password requirements and proper restriction of excessive authentication attempts to prevent brute force attacks.
For Fingerprint Bluetooth Padlock FB50 version 2.3, restrict access to the device until the issue is resolved, and ensure that authentication mechanisms are properly secured to prevent unauthorized access.
Found an issue in the description? Have something to add? Feel free to write us 👾