Meross kayıtları
meross üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-294 Authentication Bypass by Capture-replay2
- CWE-319 Cleartext Transmission of Sensitive Information2
- CWE-287 Improper Authentication1
- CWE-798 Use of Hard-coded Credentials1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2018-6401İstismar yok | Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password.meross · mss110 firmware · CWE-798 | Kritik9,8 | — | %1,2 | 2 May 2018 |
39İzleyin | CVE-2018-10544İstismar yok | Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.meross · mss110 firmware · CWE-287 | Kritik9,8 | — | %1,2 | 2 May 2018 |
35İzleyin | CVE-2023-46892İstismar yok | The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record meross · msh30q firmware · CWE-294 | Yüksek8,8 | — | %0,3 | 23 Oca 2024 |
32İzleyin | CVE-2021-35067İstismar yok | Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message cmeross · msg100 firmware · CWE-294 | Yüksek8,1 | — | %0,9 | 7 Eki 2021 |
26İzleyin | CVE-2021-3774İstismar yok | Meross MSS550X Missing Encryption of Sensitive Datameross · mss550x firmware · CWE-319 | Orta6,5 | — | %0,7 | 5 Kas 2021 |
22İzleyin | CVE-2023-46889İstismar yok | Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information.meross · msh30q firmware · CWE-319 | Orta5,7 | — | %0,2 | 23 Oca 2024 |
- CVE-2018-640139İzleyin
Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password.
KritikCVSS 9,8İstismar yokEPSS %1meross · mss110 firmware2 May 2018
- CVE-2018-1054439İzleyin
Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.
KritikCVSS 9,8İstismar yokEPSS %1meross · mss110 firmware2 May 2018
- CVE-2023-4689235İzleyin
The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record
YüksekCVSS 8,8İstismar yokEPSS %0meross · msh30q firmware23 Oca 2024
- CVE-2021-3506732İzleyin
Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message c
YüksekCVSS 8,1İstismar yokEPSS %1meross · msg100 firmware7 Eki 2021
- CVE-2021-377426İzleyin
Meross MSS550X Missing Encryption of Sensitive Data
OrtaCVSS 6,5İstismar yokEPSS %1meross · mss550x firmware5 Kas 2021
- CVE-2023-4688922İzleyin
Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information.
OrtaCVSS 5,7İstismar yokEPSS %0meross · msh30q firmware23 Oca 2024