Description

Meross MSG100 devices before 3.2.3 allow an attacker to replay the same data or similar data (e.g., an attacker who sniffs a Close message can transmit an acceptable Open message).

Related CPE's

o

meross

msg100_firmware

Vulnerable

h

meross

msg100

-

References

https://infosec.rm-it.de/2021/06/18/meross-smart-wi-fi-garage-door-opener-analysis/

ExploitThird Party Advisory

https://infosec.rm-it.de/?p=878&preview=1&_ppp=219bc85c2f

ExploitThird Party Advisory

Weaknesses

[email protected]

Primary
CWE-294

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

8.1 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-10-07T15:15:10.643

3 years ago

Last modified

2021-10-18T15:52:41.937

3 years ago