CVE-2023-36161
CVSS 3.1 Score 7.5 of 10 (high)
Details
Summary
CVE-2023-36161 is a newly identified vulnerability affecting the Qubo Smart Plug 10A with firmware version HSP02_01_01_14_SYSTEM-10A. This issue permits attackers to initiate a Wi-Fi deauthentication attack, leading to a denial of service (DoS). By exploiting this vulnerability, adversaries can disrupt the connection between the smart plug and the Wi-Fi network, rendering it inoperable. Despite the disconnection, the physical plug itself remains functional, though users cannot manage it remotely until the connection is reestablished. This weakness poses a risk to users relying on remote access to manage their smart plugs securely, potentially impacting home automation systems and IoT networks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions