Is CVE-2020-8792 actively exploited?

No active exploitation of CVE-2020-8792 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2020-8792 be exploited remotely?

Yes. CVE-2020-8792 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2020-8792?

CVE-2020-8792 has a CVSS score of 5.3 (MEDIUM).

HOME VULNERABILITIESCVE-2020-8792

MEDIUM

CVE-2020-8792

CWE-330Published: May 4, 2020· Updated: Jun 17, 2026

5.3

CVSS v3.1

Official Description

The OKLOK (3.1.1) mobile companion app for Fingerprint Bluetooth Padlock FB50 (2.3) has an information-exposure issue. In the mobile app, an attempt to add an already-bound lock by its barcode reveals the email address of the account to which the lock is bound, as well as the name of the lock. Valid barcode inputs can be easily guessed because barcode strings follow a predictable pattern. Correctly guessed valid barcode inputs entered through the app interface disclose arbitrary users' email addresses and lock names.

NVD Source

Technical Analysis

CVE-2020-8792 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.