Lucene search
CERT-InCVELIST:CVE-2024-7408HistoryAug 09, 2024 - 10:40 a.m.
CVE-2024-7408 Information Disclosure Vulnerability in Airveda Air Quality Monitor
2024-08-0910:40:54
CWE-319
CERT-In
www.cve.org
3
airveda
air quality monitor
information disclosure
vulnerability
wi-fi
ap pairing
evil twin attack
CVSS4
8.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:N/SI:H/VA:H/SA:H
EPSS
0.001
Percentile
21.4%
This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP.
Successful exploitation of this vulnerability could allow the attacker to cause Evil Twin attack on the targeted system.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Air Quality Monitor PM2.5 PM10",
"vendor": "Airveda",
"versions": [
{
"lessThan": "7.4.4.39",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
nvd
nvd
CVE-2024-7408
2024-08-12 13:38:41
cve
cve
CVE-2024-7408
2024-08-12 13:38:41
CVSS4
8.6
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/SC:H/VI:N/SI:H/VA:H/SA:H
EPSS
0.001
Percentile
21.4%
Related for CVELIST:CVE-2024-7408