VULNERABILITY INTELLIGENCE

CVE-2020-8790

CVSS score9.8 CRITICAL

EPSS probability1.65%

CISA KEVNot currently listed

Published2020-05-04

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.

Weakness classification

CWE-307: Improper Restriction of Excessive Authentication Attempts
CWE-521: Weak Password Requirements

Primary references

cve@mitre.org — Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory