Design/Logic Flaw

2024-01-2320:15:00

PRIOn knowledge base

www.prio-n.com

cleartext transmission

shelly trv

local attacker

wi-fi password

initial setup

6.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

Cleartext Transmission during initial setup in Shelly TRV 20220811-15234 v.2.1.8 allows a local attacker to obtain the Wi-Fi password.

CPENameOperatorVersion
trv_firmwareeq2.1.8

CPE	Name	Operator	Version
	trv_firmware	eq	2.1.8

References

www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219