CVE-2013-4860

EUVD-2013-4705
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.3 UNKNOWN
ADJACENT_NETWORK
LOW
AV:A/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 60%
Affected Products (NVD)
VendorProductVersion
radiothermostatct50_firmware
𝑥
≤ 1.4.64
radiothermostatct50
-
radiothermostatct80_firmware
𝑥
≤ 1.4.64
radiothermostatct80
-
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/122657/Radio-Thermostat-Of-America-Inc-Lack-Of-Authentication.html
http://www.securityfocus.com/bid/61581
https://exchange.xforce.ibmcloud.com/vulnerabilities/86197
http://packetstormsecurity.com/files/122657/Radio-Thermostat-Of-America-Inc-Lack-Of-Authentication.html
http://www.securityfocus.com/bid/61581
https://exchange.xforce.ibmcloud.com/vulnerabilities/86197