Lucene search
+L

94 matches found

Cvelist
Cvelist
•added 2024/10/07 12:00 a.m.•30 views

CVE-2024-46041

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

0.0034EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/10/07 12:00 a.m.•14 views

PT-2024-31882 · Iot Haat · Iot Haat Smart Plug Ih-In-16A-S

Name of the Vulnerable Software and Affected Versions: IoT Haat Smart Plug IH-IN-16A-S version 5.16.1 Description: The issue is related to Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode allows an attacker to...

6.5CVSS7.2AI score0.00284EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•1 views

CVE-2024-46041: Authentication Bypass by Capture-replay

IoT Haat Smart Plug IH-IN-16A-S v5.16.1 is vulnerable to Authentication Bypass by Capture-replay...

8.8CVSS5.7AI score0.0034EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/07 12:00 a.m.•1 views

CVE-2024-46040: Insufficient Session Expiration

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

6.5CVSS5.8AI score0.00284EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/10/07 12:00 a.m.•13 views

IoT Haat Smart Plug IH-IN-16A-S 安全漏洞

IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from vulnerability to capture replay authentication bypass attacks...

8.8CVSS6.9AI score0.0034EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/10/07 12:00 a.m.•30 views

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

0.00284EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/10/07 12:00 a.m.•13 views

CVE-2024-46040

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after t...

7.1AI score0.00284EPSS
SaveExploits1References2
CVE
CVE
•added 2024/10/07 12:00 a.m.•70 views

CVE-2024-46041

The IoT Haat Smart Plug IH-IN-16A-S (Application Software Version v5.16.1 ) is vulnerable to an Authentication Bypass by Capture-replay . During the provisioning phase, an attacker can perform a replay attack by replacing a legitimate authentication token with an attacker-controlled token. This v...

8.8CVSS7.1AI score0.0034EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/10/07 12:00 a.m.•15 views

IoT Haat Smart Plug IH-IN-16A-S 安全漏洞

IoT Haat Smart Plug IH-IN-16A-S is a smart plug from IoT Haat. A security vulnerability exists in IoT Haat Smart Plug IH-IN-16A-S version v5.16.1, which stems from the presence of a session expiration insufficiency issue and lack of validation of authentication tokens, which could lead to an...

6.5CVSS6.8AI score0.00284EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2023/09/16 12:15 a.m.•13 views

CVE-2023-36160

An issue was discovered in Qubo Smart Plug10A version HSP02010114SYSTEM-10 A, allows local attackers to gain sensitive information and other unspecified impact via UART console...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0References2
OSV
OSV
•added 2023/09/16 12:15 a.m.•16 views

CVE-2023-36160

An issue was discovered in Qubo Smart Plug10A version HSP02010114SYSTEM-10 A, allows local attackers to gain sensitive information and other unspecified impact via UART console...

5.5CVSS5.8AI score0.00173EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/09/15 12:00 a.m.•12 views

Qubo Smart Plug Security Vulnerability

Qubo Smart Plug is a smart plug from Qubo. It effectively manages and tracks the energy consumption of devices through real-time power monitoring. A security vulnerability exists in Qubo Smart Plug version 10A HSP02010114SYSTEM-10 A. The vulnerability stems from a vulnerability that allows an...

5.5CVSS6.7AI score0.00173EPSS
SaveExploits0References3
CVE
CVE
•added 2023/09/15 12:00 a.m.•50 views

CVE-2023-36160

CVE-2023-36160 affects Qubo Smart Plug10A, specifically version HSP02_01_01_14_SYSTEM-10 A. The issue permits local attackers to access sensitive information via the UART console, with the exposed impact limited to confidentiality (as per the CVSS and vendor notes) and without other confirmed exp...

5.5CVSS5.5AI score0.00173EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/09/15 12:00 a.m.•18 views

PT-2023-25460 · Unknown · Qubo Smart Plug 10A

Name of the Vulnerable Software and Affected Versions: Qubo Smart Plug10A version HSP02 01 01 14 SYSTEM-10 A Description: An issue was discovered in Qubo Smart Plug10A, allowing local attackers to gain sensitive information and other unspecified impact via UART console. Recommendations: For Qubo...

5.5CVSS5.6AI score0.00173EPSS
SaveExploits0References5
attackerkb
attackerkb
•added 2023/09/11 1:15 p.m.•12 views

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

7.5CVSS5.8AI score0.00652EPSS
SaveExploits0References2
OSV
OSV
•added 2023/09/11 1:15 p.m.•11 views

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

7.5CVSS7.1AI score0.00652EPSS
SaveExploits0References1
Prion
Prion
•added 2023/09/11 1:15 p.m.•29 views

Design/Logic Flaw

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

5CVSS7.3AI score0.00652EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/09/11 12:00 a.m.•17 views

CVE-2023-36161

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

6.8AI score0.00652EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/09/11 12:00 a.m.•1 views

CVE-2023-36161: Uncontrolled Resource Consumption

An issue was discovered in Qubo Smart Plug 10A version HSP02010114SYSTEM-10A, allows attackers to cause a denial of service DoS via Wi-Fi deauthentication...

7.5CVSS7.2AI score0.00652EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2023/09/11 12:00 a.m.•18 views

Qubo Smart Plug Security Vulnerability

Qubo Smart Plug is a smart plug from Qubo. It effectively manages and tracks the energy consumption of devices through real-time power monitoring. A security vulnerability exists in the Qubo Smart Plug version 10A HSP02010114SYSTEM-10A, which stems from a vulnerability that allows an attacker to...

7.5CVSS6.6AI score0.00652EPSS
SaveExploits0References2
Rows per page
Query Builder