Lucene search
HistoryJun 05, 2014 - 8:55 p.m.
CVE-2013-4860
8.3 High
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.6%
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.
Affected configurations
Node
radiothermostatct50_firmwareRange≤1.4.64
radiothermostatct50Match-
Node
radiothermostatct80_firmwareRange≤1.4.64
radiothermostatct80Match-
Related
cve
cve
CVE-2013-4860
2014-06-05 20:55:05
CVE-2018-11315
2018-05-20 13:29:00
prion
prion
Design/Logic Flaw
2014-06-05 20:55:00
Information disclosure
2018-05-20 13:29:00
packetstorm
packetstorm
Radio Thermostat Of America, Inc Lack Of Authentication
2013-08-02 00:00:00
cvelist
cvelist
CVE-2013-4860
2014-06-05 20:00:00
CVE-2018-11315
2018-05-20 13:00:00
nvd
nvd
CVE-2018-11315
2018-05-20 13:29:00
8.3 High
CVSS2
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:C/I:C/A:C
6.4 Medium
AI Score
Confidence
High
0.006 Low
EPSS
Percentile
78.6%
Related for NVD:CVE-2013-4860