Today > vulnerabilities   -   You can now download lists of IOCs here!

CVE-2024-7408

Aug. 12, 2024, 1:41 p.m.

Tags

CWE-319
vdisclose@cert-in.org.in
2024-08-12
CVE-2024-7408

Product(s) Impacted

Airveda Air Quality Monitor PM2.5 PM10

Description

This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP. Successful exploitation of this vulnerability could allow the attacker to cause Evil Twin attack on the targeted system.

Weaknesses

CWE-319
Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

CWE ID: 319

Date

Published: Aug. 12, 2024, 1:38 p.m.

Last Modified: Aug. 12, 2024, 1:41 p.m.

Status : Awaiting Analysis

CVE has been marked for Analysis. Normally once in this state the CVE will be analyzed by NVD staff within 24 hours.

More info

Source

vdisclose@cert-in.org.in

References

https://www.cert-in.org.in/ vdisclose@cert-in.org.in