CVE-2017-16778 describes an access control weakness in the DTMF tone receiver of Fermax Outdoor Panels, allowing physical attackers to inject specific DTMF tones to grant unauthorized access to restricted floors or levels. This vulnerability affects Fermax Outdoor Panel products and their firmware. The vulnerability has a CVSS score of 4.6 (MEDIUM), indicating a physical attack vector with low complexity, requiring no user interaction, and resulting in high integrity impact (unauthorized access). While the EPSS score is low, the FAUCET Risk Score is 14/100, suggesting a moderate risk. Currently, there is no evidence of active exploitation, and no public exploit code is available in Metasploit, Nuclei, or ExploitDB. The vulnerability has received no community discussion or media coverage, indicating a low level of public awareness or attention.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:o:fermax:outdoor_panel_firmware:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.