Vulnerabilities

TI-2018-08062 CVE-2018-11315 · GHSA-77cg-9m32-vxjv

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows…

LOW 30

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack.

CVSS 3.0MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00775 Published 2018-05-20 No fix listed CWE-20

TI-2013-04264 CVE-2013-4860 · GHSA-xvr8-rhg7-pv7w

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access…

MEDIUM 40

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other…

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.01956 Published 2014-06-05 No fix listed CWE-264

Vulnerabilities

Filters

The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows…

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access…