CVE-2023-46892

2024-01-2300:00:00

mitre

www.cve.org

meross msh30q

replay attacks

unauthorized commands

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.5%

JSON

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions (e.g., thermostat’s temperature).