Access Control Weakness in Fermax Outdoor Panel by Fermax
CVE-2017-16778
Key Information:
- Vendor
Fermax
- Status
- Vendor
- CVE Published:
- 24 December 2019
Badges
What is CVE-2017-16778?
A significant flaw in the DTMF tone receiver of the Fermax Outdoor Panel exposes it to unauthorized physical access. This vulnerability stems from inadequate access control mechanisms, allowing attackers to exploit the system using specific Dual-Tone-Multi-Frequency (DTMF) tones. By injecting these tones, an attacker can bypass security measures and gain entry to restricted areas where only authorized personnel should be permitted. The design relies on the exclusive authority of residential unit owners to grant access; however, the failure in implementing proper safeguards means that this critical barrier can be compromised.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.