CVE-2023-46892

Summary

CVE-2023-46892 is a vulnerability affecting Meross MSH30Q devices running software version 4.5.23. The issue lies in the radio frequency communication protocol, making it susceptible to replay attacks. Attackers can exploit this vulnerability by recording and replaying previous communications to execute unauthorized commands, potentially altering the thermostat's temperature settings without authorization.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.