An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Tue, 15 Oct 2024 20:15:00 +0000

Type Values Removed Values Added
First Time appeared Shelly
Shelly home Firmware
Weaknesses CWE-306
CPEs cpe:2.3:o:shelly:home_firmware:*:*:*:*:*:*:*:*
Vendors & Products Shelly
Shelly home Firmware
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 11 Oct 2024 19:45:00 +0000

Type Values Removed Values Added
Description An issue in Shelly com.home.shelly 1.0.4 allows a remote attacker to obtain sensitive information via the firmware update process
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-10-15T19:13:31.112Z

Reserved: 2024-10-08T00:00:00

Link: CVE-2024-48776

cve-icon Vulnrichment

Updated: 2024-10-15T19:13:21.342Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-11T20:15:05.903

Modified: 2024-10-15T20:35:15.697

Link: CVE-2024-48776

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.