Lucene search
PRIOn knowledge basePRION:CVE-2018-11315HistoryMay 20, 2018 - 1:29 p.m.
Information disclosure
2018-05-2013:29:00
PRIOn knowledge base
www.prio-n.com
3
The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This can result in remote device temperature control, as demonstrated by a tstat t_heat request that accesses a device purchased in the Spring of 2018, and sets a home’s target temperature to 95 degrees Fahrenheit. This vulnerability might be described as an addendum to CVE-2013-4860.
| CPE | Name | Operator | Version |
|---|---|---|---|
| ct50_firmware | le | 1.04.84 | |
| ct80_firmware | le | 1.04.84 |
Related
cve
cve
CVE-2018-11315
2018-05-20 13:29:00
CVE-2013-4860
2014-06-05 20:55:05
cvelist
cvelist
CVE-2018-11315
2018-05-20 13:00:00
CVE-2013-4860
2014-06-05 20:00:00
nvd
nvd
CVE-2018-11315
2018-05-20 13:29:00
CVE-2013-4860
2014-06-05 20:55:05
prion
prion
Design/Logic Flaw
2014-06-05 20:55:00
packetstorm
packetstorm
Radio Thermostat Of America, Inc Lack Of Authentication
2013-08-02 00:00:00