Meross

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Meross records in CISA KEV

No Meross vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Mss110 Firmware · all components

TI-2018-07445 CVE-2018-10544 · GHSA-3w97-prq2-5cjc

MEDIUM 44

Meross MSS110 devices through 1.1.24 contain an unauthenticated admin.htm administrative interface.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01181 Published 2018-05-02 No fix listed CWE-287

TI-2018-04716 CVE-2018-6401 · GHSA-38xc-f68r-gxf2

MEDIUM 44

Meross MSS110 devices before 1.1.24 contain a TELNET listener providing access for an undocumented admin account with a blank password.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2018-05-02 No fix listed CWE-798