CVE-2025-6260 Network Thermostat X-Series WiFi Thermostats Missing Authentication for Critical Function

The embedded web server on the thermostat listed version ranges contain a vulnerability that allows unauthenticated attackers, either on the local area network or from the Internet via a router with port forwarding set up, to gain direct access to the thermostat's embedded web server and reset us...

RHSA-2014:2000 Red Hat Security Advisory: thermostat1-thermostat security update

Bulletin has no description...

First-Ever Ransomware For Smart Thermostat is Here — It's Hot!

Internet of Things IoT is the latest buzz in the world of technology, but they are much easier to hack than you think. Until now we have heard many scary stories of hacking IoT devices, but how realistic is the threat? Just think of a scenario where you enter in your house, and it's sweltering, b...

CVE-2013-4860

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors...