CVE-2024-47079
Unauthorized usage of remote hardware module because of missing channel verification
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Unauthorized usage of remote hardware module because of missing channel verification
Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote hardware control message was received should be considered valid. This issue has been addressed in release version 2.5.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Reserved 2024-09-17 | Published 2024-10-07 | Updated 2024-10-07 | Assigner GitHub_MCWE-345: Insufficient Verification of Data Authenticity
github.com/...rmware/security/advisories/GHSA-h8mh-p4r3-4jv7
Support options
