Sonoff

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Sonoff records in CISA KEV

No Sonoff vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Th10 Firmware · all components

TI-2020-05993 CVE-2020-7470 · GHSA-8v5g-fq6x-6r4h

LOW 23

Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successful login with the Web Admin Password).

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00564 Published 2020-01-21 No fix listed CWE-79