CVE-2020-8790 - The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack

Back Back to CVE browser

CRITICAL

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack

Published May 4, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.65%

Description

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-307

CWE-521

References (1)

https://github.com/fierceoj/ownklok
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://github.com/fierceoj/ownklok		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 4, 2020

Updated Aug 4, 2024

Reserved Feb 7, 2020

Link CVE-2020-8790

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-8790

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-8790