Lucene search
PRIOn knowledge basePRION:CVE-2021-3774HistoryNov 05, 2021 - 9:15 p.m.
Cross site request forgery (csrf)
2021-11-0521:15:00
PRIOn knowledge base
www.prio-n.com
4
Meross Smart Wi-Fi 2 Way Wall Switch (MSS550X), on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app via Http/JSON plain request.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mss550x_firmware | le | 3.1.3 |
Related
cve
cve
CVE-2021-3774
2021-11-05 21:15:08
nvd
nvd
CVE-2021-3774
2021-11-05 21:15:08
cvelist
cvelist
CVE-2021-3774 Meross MSS550X Missing Encryption of Sensitive Data
2021-11-05 19:41:27