Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2023-42179: Bird Home Automation D1101V-F allows unauthorized access
CVE-2023-42179 · published 8 days ago
Summary
The D1101V-F controller from Bird Home Automation does not correctly verify passwords, meaning someone could bypass the login process and gain control of the device. This could let an attacker change settings or monitor home systems. Update the firmware to the latest version or contact the vendor for a fix as soon as possible.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | bird | All versions |
| Ubuntu:18.04:LTS | canonical | bird | All versions |
| Ubuntu:20.04:LTS | canonical | bird | All versions |
| Ubuntu:22.04:LTS | canonical | bird | All versions |
| Ubuntu:24.04:LTS | canonical | bird | All versions |
Original advisory text
Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.
Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation process.
References
- http://bird.com
- https://github.com/johndoe31415/doorbird-kdf-vulnerability
- https://ubuntu.com/security/CVE-2023-42179 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-42179 Third Party Advisory
Severity
9.8
Critical
Exploitation
EPSS <1%
Type
CWE-284Improper Access Control
Timeline
Published26 Aug 2026
Updated2 Sep 2026
First seen26 Aug 2026
Monitor software like this
Free during beta