Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Sinilink records in CISA KEVNo Sinilink vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 60
The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT.
CVSS 3.1MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01888 · Published 2023-01-20 · No fix listed CWE-294
Open these records in search →