CVE-2020-3929: GeoVision Door Access Control Device - Shared cryptographic keys
Published Jun 12, 2020
·Updated
GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
Affected Software
10 affected components
Usavisionsys Geovision Gv-as210 Firmware<2.21
Usavisionsys Geovision Gv-as210
Usavisionsys Geovision Gv-as410 Firmware<2.21
Usavisionsys Geovision Gv-as410
Usavisionsys Geovision Gv-as810 Firmware<2.21
Usavisionsys Geovision Gv-as810
Usavisionsys Geovision Gv-as1010 Firmware<1.32
Usavisionsys Geovision Gv-as1010
Usavisionsys Geovision Gv-gf192x Firmware<1.10
Usavisionsys Geovision Gv-gf192x
Remediation
Information
Update to version 2.22 in GV-AS210
Update to version 2.22 in GV-AS410
Update to version 2.22 in GV-AS810
Update to version 1.22 in GV-GF192x
Update to version 1.33 in GV-AS1010
Event History
Jun 12, 2020
CVE Published
via MITRE·08:25 AM
Data Sourced
via MITRE·08:25 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID is CVE-2020-3929.
2
What is the severity of CVE-2020-3929?
The severity of CVE-2020-3929 is medium with a CVSS score of 5.9.
3
How does the GeoVision Door Access Control device family employ shared cryptographic private keys?
The GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS.
4
What is the risk associated with CVE-2020-3929?
The risk associated with CVE-2020-3929 is that attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
5
Is there a fix for this vulnerability?
There is no fix available for this vulnerability at the moment.