CVE-2020-8790

9.8 criticalEPSS 1.7%

Critical (9.8) in oklok project oklok. EPSS 1.7% chance of exploitation in the next 30 days.

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has weak password requirements combined with improper restriction of excessive authentication attempts, which could allow a remote attacker to discover user credentials and obtain access via a brute force attack.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.7% chance of exploitation in the next 30 days; higher than 76% of CVEs (scores of 2026-10-31)
CWEs: CWE-307, CWE-521
Published: 2020-05-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

oklok_project:oklok

References

https://github.com/fierceoj/ownklok
https://github.com/fierceoj/ownklok

Check your stack JSON