Lucene search
HistoryJun 05, 2014 - 8:55 p.m.
CVE-2013-4860
CVSS2
8.3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
High
EPSS
0.006
Percentile
78.5%
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.
Affected configurations
Node
radiothermostatct50_firmwareRange≤1.4.64
radiothermostatct50Match-
Node
radiothermostatct80_firmwareRange≤1.4.64
radiothermostatct80Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| radiothermostat | ct50_firmware | * | cpe:2.3:o:radiothermostat:ct50_firmware:*:*:*:*:*:*:*:* |
| radiothermostat | ct50 | - | cpe:2.3:h:radiothermostat:ct50:-:*:*:*:*:*:*:* |
| radiothermostat | ct80_firmware | * | cpe:2.3:o:radiothermostat:ct80_firmware:*:*:*:*:*:*:*:* |
| radiothermostat | ct80 | - | cpe:2.3:h:radiothermostat:ct80:-:*:*:*:*:*:*:* |
Related
packetstorm
packetstorm
Radio Thermostat Of America, Inc Lack Of Authentication
2013-08-02 00:00:00
cvelist
cvelist
CVE-2013-4860
2014-06-05 20:00:00
CVE-2018-11315
2018-05-20 13:00:00
prion
prion
Design/Logic Flaw
2014-06-05 20:55:00
Information disclosure
2018-05-20 13:29:00
cve
cve
CVE-2013-4860
2014-06-05 20:55:05
CVE-2018-11315
2018-05-20 13:29:00
nvd
nvd
CVE-2018-11315
2018-05-20 13:29:00
CVSS2
8.3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:A/AC:L/Au:N/C:C/I:C/A:C
AI Score
6.4
Confidence
High
EPSS
0.006
Percentile
78.5%
Related for NVD:CVE-2013-4860