CVE Feed

    Dashboard / CVE / CVE-2018-15479

    CVE-2018-15479

    An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. Devices did not authenticate themselves to the cloud in device to cloud communication. This lack of device authentication allowed an attacker to impersonate any device by guessing or learning their MAC address.

    Published:Aug 30, 2018
    Last Modified:Nov 21, 2024
    EPS:Aug 30, 2018
    EPSS Score:0.00191
    CVSS Score:6.5

    Affected Products

    Vendor
    Mystrom
    Product
    Wifi Bulb
    Vendor
    Mystrom
    Product
    Wifi Bulb Firmware
    Vendor
    Mystrom
    Product
    Wifi Button
    Vendor
    Mystrom
    Product
    Wifi Button Firmware
    Vendor
    Mystrom
    Product
    Wifi Button Plus
    Vendor
    Mystrom
    Product
    Wifi Button Plus Firmware
    Vendor
    Mystrom
    Product
    Wifi Led Strip
    Vendor
    Mystrom
    Product
    Wifi Led Strip Firmware
    Vendor
    Mystrom
    Product
    Wifi Switch
    Vendor
    Mystrom
    Product
    Wifi Switch Eu
    Vendor
    Mystrom
    Product
    Wifi Switch Eu Firmware
    Vendor
    Mystrom
    Product
    Wifi Switch Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High