CVE-2024-7408 | THREATINT

Assigner	CERT-In
Reserved	2024-08-02
Published	2024-08-09
Updated	2024-08-09

Description

This vulnerability exists in Airveda Air Quality Monitor PM2.5 PM10 due to transmission of sensitive information in plain text during AP pairing mode. An attacker in close proximity could exploit this vulnerability by capturing Wi-Fi traffic of Airveda-AP. Successful exploitation of this vulnerability could allow the attacker to cause Evil Twin attack on the targeted system.

HIGH: 8.6

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:H/SI:H/SA:H

Product status

Default status

unaffected

Any version before 7.4.4.39

affected

Credits

This vulnerability is reported by Anand Agrawal and Dr. Rajib Ranjan Maiti from BITS-Pilani, Hyderabad Campus finder

References

https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2024-0233 third-party-advisory

cve.org CVE-2024-7408

nvd.nist.gov CVE-2024-7408

Download JSON

https://cve.threatint.com/CVE/CVE-2024-7408

Support options

Helpdesk Telegram

Subscribe to our newsletter to learn more about our work.