CVE-2021-35067

CVE-2021-35067 affects Meross MSG100 devices (firmware before 3.2.3). The vulnerability allows an attacker to replay the same data or similar data (e.g., sniffed Close messages and transmit an acceptable Open message), enabling unauthorized state changes. Documents from multiple sources corrobora...