Threat database

FastBee versions up to 2.1.0 have an insecure direct object reference vulnerability that allows authenticated low-privilege users to access and manipulate other users' device groups. This occurs because the GroupController does not verify ownership when querying groups. Attackers can read, overwrite, reassign, or delete device groups belonging to other users by supplying sequential group IDs.

FastBee versions up to 2.1.0 have an insecure direct object reference vulnerability in the DeviceController component. This flaw allows authenticated low-privilege users to access and modify devices belonging to other tenants by manipulating device identifiers. Attackers can enumerate device IDs or serial numbers to obtain sensitive information such as device owner, IP address, and location, and can overwrite user and tenant identifiers to take control of devices.

A vulnerability was detected in beecue FastBee up to 2.1. Impacted is the function getRootElement of the file springboot/fastbee-server/sip-server/src/main/java/com/fastbee/sip/handler/req/ReqAbstractHandler.java of the component SIP Message Handler. The manipulation results in xml external entity reference. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The project owner replied to the issue report: "Okay, we'll handle it as soon as possible."