Fermax — Vulnerabilities & Security Advisories 4

Fermax specializes in video door entry and access control systems for residential and commercial buildings. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from improper input validation and authentication bypasses. Security researchers have identified multiple instances of hardcoded credentials and insecure default configurations that could allow unauthorized access. While no major public incidents have been widely documented, the presence of four CVEs indicates persistent security concerns in their IoT devices, particularly in web interfaces and mobile companion applications that may expose building systems to remote compromise.