Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

Vendor: Csa-iot Clear all filters
TI-2025-35315 CVE-2025-56364 · GHSA-3xhc-5w7c-ppw7

A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip)…

Priority MEDIUM 59

A use of uninitialized value vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, where the `GetDestinationGroupId().Value()` method is called without first checking whether a value exists.

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00198 Published 2026-07-14 No fix listed CWE-457
TI-2025-35314 CVE-2025-56363 · GHSA-mv6q-v23c-9757

A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip)…

Priority MEDIUM 59

A null pointer dereference vulnerability exists in the Matter SDK (connectedhomeip) before 1.4.0, affecting the ReadRevisionAttribute function used in multiple clusters (Channel, Account Login, TargetNavigator, etc.).

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00369 Published 2026-07-14 No fix listed CWE-476
TI-2025-35312 CVE-2025-56361 · GHSA-f6px-4w9c-rj4f

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru…

Priority MEDIUM 59

A reachable assertion vulnerability exists in the Matter SDK (connectedhomeip) 1.3 thru 1.4, specifically within the Level Control cluster's server tick logic (`emberAfLevelControlClusterServerTickCallback`).

CVSS 3.1MEDIUM 5.7 Adjacent network Low privileges No interaction EPSS 0.00293 Published 2026-07-14 No fix listed CWE-617
TI-2024-03091 CVE-2024-3297 · GHSA-x5mh-xcwg-v34g

Session establishment lock-up during replay of CASE Sigma1 messages

Priority LOW 28

An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between two devices, as implemented in the Matter protocol versions before Matter 1.1 allows an attacker to…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00152 Published 2024-07-24 Fixed in 1.1 CWE-400
TI-2024-03219 CVE-2024-3454 · GHSA-5w32-hrcv-cfhw

In-Fabric Matter Cluster Attribute Disclosure

Priority LOW 16

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), eve…

CVSS 3.1LOW 3.5 Adjacent network Low privileges No interaction EPSS 0.00208 Published 2024-07-24 No fix listed CWE-209