VULNERABILITY INTELLIGENCE
CVE-2020-3929
CVSS score5.9 MEDIUM
EPSS probability0.51%
CISA KEVNot currently listed
Published2020-06-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
GeoVision Door Access Control device family employs shared cryptographic private keys for SSH and HTTPS. Attackers may conduct MITM attack with the derived keys and plaintext recover of encrypted messages.
Weakness classification
- nvd@nist.gov: CWE-326
Primary references
- twcert@cert.org.tw — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory