Vendors / Radiothermostat Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Radiothermostat records in CISA KEV No Radiothermostat vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 40
Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other…
CVSS 2.0 HIGH 8.3· Adjacent network · No auth · Interaction — · EPSS 0.01956 · Published 2014-06-05 · No fix listed CWE-264
Priority LOW 30
The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack.
CVSS 3.0 MEDIUM 6.5· Adjacent network · No auth · No interaction · EPSS 0.00775 · Published 2018-05-20 · No fix listed CWE-20
Open these records in search → All records by CVSS severity
Critical0 High1 Medium1 Low0 No CVSS0