CVE-2024-34268
Last modified
CVE-2024-34268 is a high-severity vulnerability rated 7.1/10 on the CVSS scale. EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication.. EPSS estimates a 0.20% chance of exploitation in the next 30 days.
Description
EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication.
Metrics
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-34268?
How severe is CVE-2024-34268?
How do I fix CVE-2024-34268?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-34251An out-of-bound memory read vulnerability was discovered in …7.5
- CVE-2024-34252wasm3 v0.5.0 was discovered to contain a global buffer overf…7.5
- CVE-2024-34255jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnera…6.1
- CVE-2024-34256OFCMS V1.1.2 is vulnerable to SQL Injection via the new tabl…9.8
- CVE-2024-34257TOTOLINK EX1800T V9.1.0cu.2112_B20220316 has a vulnerability…9.8
- CVE-2024-3426A vulnerability, which was classified as problematic, has be…5.4
- CVE-2024-3427A vulnerability, which was classified as problematic, was fo…5.4
- CVE-2024-34273njwt up to v0.4.0 was discovered to contain a prototype poll…5.9
- CVE-2024-34274OpenBD 20210306203917-6cbe797 is vulnerable to Deserializati…3.9
- CVE-2024-3428A vulnerability has been found in SourceCodester Online Cour…6.1
- CVE-2024-3429A path traversal vulnerability exists in the parisneo/lollms…9.8
- CVE-2024-3430A vulnerability was found in QKSMS up to 3.9.4 on Android. I…2.4
Are you affected by CVE-2024-34268?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST