Tasmota Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tasmota Project records in CISA KEV

No Tasmota Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tasmota 2 records MEDIUM

Records

2 records in Tasmota · all components

TI-2021-14814 CVE-2021-36603 · GHSA-qvg8-rx3x-c43j

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject…

MEDIUM 60

Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00509 Published 2023-01-09 No fix listed CWE-79

TI-2022-21136 CVE-2022-43294 · GHSA-8r54-qrm3-cm32

Tasmota before commit 066878d was discovered to contain…

MEDIUM 51

Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00981 Published 2022-11-14 No fix listed CWE-787

Open these records in search →

Critical	1
High	0
Medium	1
Low	0
No CVSS	0