Description

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message can transmit an acceptable Open message).

Related CPE's

o

meross

msg100_firmware

Vulnerable

h

meross

msg100

-

References

https://infosec.rm-it.de/2021/06/18/meross-smart-wi-fi-garage-door-opener-analysis/

ExploitThird Party Advisory

https://infosec.rm-it.de/?p=878&preview=1&_ppp=219bc85c2f

ExploitThird Party Advisory

https://infosec.rm-it.de/2021/06/18/meross-smart-wi-fi-garage-door-opener-analysis/

ExploitThird Party Advisory

https://infosec.rm-it.de/?p=878&preview=1&_ppp=219bc85c2f

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-294

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

8.1 · High

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2021-10-07T13:15:10.643Z

4 years ago

Last modified

2024-11-21T05:11:47.087Z

1 year ago