VULNERABILITY INTELLIGENCE

CVE-2023-46892

CVSS score8.8 HIGH
EPSS probability0.28%
CISA KEVNot currently listed
Published2024-01-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions (e.g., thermostat's temperature).

Weakness classification

  • nvd@nist.gov: CWE-294
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-294

Primary references