CVE-2021-3774

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

CVE-2021-3774

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

Cross site request forgery (csrf)

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

CVE-2021-3774 Meross MSS550X Missing Encryption of Sensitive Data

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

CVE-2021-3774 Meross MSS550X Missing Encryption of Sensitive Data

Meross Smart Wi-Fi 2 Way Wall Switch MSS550X, on its 3.1.3 version and before, creates an open Wi-Fi Access Point without the required security measures in its initial setup. This could allow a remote attacker to obtain the Wi-Fi SSID as well as the password configured by the user from Meross app...

CVE-2021-3774

CVE-2021-3774 affects Meross Smart Wi‑Fi 2 Way Wall Switch (MSS550X),

Meross Smart Wi-Fi 2 Way Wall Switch 安全漏洞

The Meross Smart Wi-Fi 2 Way Wall Switch is a smart device from China-based Meross Technology Meross. A security vulnerability exists in the Meross Smart Wi-Fi 2 Way Wall Switch MSS550X that could allow a remote attacker to obtain the Wi-Fi SSID and user-configured password from the Meross...

PT-2021-21854 · Meross · Meross Smart Wi-Fi 2 Way Wall Switch

Name of the Vulnerable Software and Affected Versions: Meross Smart Wi-Fi 2 Way Wall Switch MSS550X versions 3.1.3 and earlier Description: The issue allows a remote attacker to obtain the Wi-Fi SSID and the password configured by the user from the Meross app via an Http/JSON plain request. This ...

Meross Smart Wi-Fi Garage Door Opener has an unspecified vulnerability

The Meross Smart Wi-Fi Garage Door Opener Msg100 is a smart garage door opener from Meross Technology China...

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

Design/Logic Flaw

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

CVE-2021-35067

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data e.g., an attacker who sniffs a Close message can transmit an acceptable Open message...

CVE-2021-35067

CVE-2021-35067 affects Meross MSG100 devices (firmware before 3.2.3). The vulnerability allows an attacker to replay the same data or similar data (e.g., sniffed Close messages and transmit an acceptable Open message), enabling unauthorized state changes. Documents from multiple sources corrobora...

Meross Smart Wi-Fi Garage Door Opener 安全漏洞

The Meross Smart Wi-Fi Garage Door Opener Msg100 is a smart garage door opener from Meross Technology China...

Meross MSS110 Unauthenticated Admin .HTM Management Interface Vulnerability

Meross MSS110 is a smart WiFi socket device from China's Forari Meross Technology. A security vulnerability exists in Meross MSS110 version 1.1.24 and earlier. An attacker can exploit this vulnerability to cause a denial of service or obtain information...

Meross MSS110 TELNET listener unauthorized access vulnerability

Meross MSS110 is a smart WiFi socket device from Meross Technologies, China.TELNET listenerhi one of the TELNET listening components. A security vulnerability exists in the TELNET listener in Meross MSS110 versions prior to 1.1.24. The vulnerability can be exploited by an attacker to access the...

CVE-2018-6401

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...

Design/Logic Flaw

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface...

Default credentials

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password...