NVD

Id
40375  
Name
CVE-2013-4860  
Description
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
8.3  
Severity
High  
CVSS Base Score
8.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
6.5  
CVSS Vector
(AV:A/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2014-06-05  
Modified Date
2014-06-06  
Seq
2013-4860  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
205022 40375 CVE-2013-4860 http://packetstormsecurity.com/files/122657/Radio-Thermostat-Of-America-Inc-Lack-Of-Authentication.html  View
205023 40375 CVE-2013-4860 61581  View
205024 40375 CVE-2013-4860 radiothermostat-cve20134860-security-bypass(86197)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
24989 JVNDB-2013-006564 Radio Thermostat CT80 および CT50 のファームウェアにおける設定を変更される脆弱性 Radio Thermostat CT80 および CT50 のファームウェアは、API に対するアクセスを制限しないため、操作モード、Wi-Fi 接続設定、しきい値温度、および その他設定を変更される脆弱性が存在します。 CVE-2013-4860 64802 CVE-2013-4860 40375 8.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-006564.html 2013-08-02 2014-06-09 View