Vulnerability index

Browse CVEs

35 matching

Cards Compact

Filters 1 Clear all

Keyword

Severity

Any Critical High Medium Low

Technology

Recency

Analysis

Fix

Sort

Exploited (KEV) only

Filters apply as you choose them.

An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username.

An attacker can change registered email addresses of other users and take over arbitrary accounts.

An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response to this unsolicited request.

Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms").

An unauthenticated attacker can infer the existence of usernames in the system by querying an API.