Skip to content
Noroxi

Meross records

6 published records for vendor meross.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2018-6401
    39Monitor

    Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password.

    CriticalCVSS 9.8No exploitEPSS 1%

    meross · mss110 firmwareMay 2, 2018

  • CVE-2018-10544
    39Monitor

    Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.

    CriticalCVSS 9.8No exploitEPSS 1%

    meross · mss110 firmwareMay 2, 2018

  • CVE-2023-46892
    35Monitor

    The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record

    HighCVSS 8.8No exploitEPSS 0%

    meross · msh30q firmwareJan 23, 2024

  • CVE-2021-35067
    32Monitor

    Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message c

    HighCVSS 8.1No exploitEPSS 0%

    meross · msg100 firmwareOct 7, 2021

  • CVE-2021-3774
    26Monitor

    Meross MSS550X Missing Encryption of Sensitive Data

    MediumCVSS 6.5No exploitEPSS 0%

    meross · mss550x firmwareNov 5, 2021

  • CVE-2023-46889
    22Monitor

    Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information.

    MediumCVSS 5.7No exploitEPSS 0%

    meross · msh30q firmwareJan 23, 2024