TLS Certificate Validation Bypass Vulnerability in 3xLogic Infinias eIDC32 Devices

TLS Certificate Validation Bypass Vulnerability in 3xLogic Infinias eIDC32 Devices

CVE-2020-12681 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Missing TLS certificate validation on 3xLogic Infinias eIDC32 devices through 3.4.125 allows an attacker to intercept/control the channel by which door lock policies are applied.

Learn more about our Web Application Penetration Testing UK.