Design/Logic Flaw

2024-01-2320:15:00

PRIOn knowledge base

www.prio-n.com

design flaw

logic

backdoor

malicious user

firmware

nvd

7.2 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

14.0%

JSON

Missing Integrity Check in Shelly TRV 20220811-152343/v2.1.8@5afc928c allows malicious users to create a backdoor by redirecting the device to an attacker-controlled machine which serves the manipulated firmware file. The device is updated with the manipulated firmware.

CPENameOperatorVersion
trv_firmwareeq2.1.8

CPE	Name	Operator	Version
	trv_firmware	eq	2.1.8

References

www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219