CVE-2023-29780

Exploit

EPSS 0.25%
Published 24.04.2023 19:15:09
Last modified 04.02.2025 17:15:14
Source cve@mitre.org
Teams watchlist Login
Open Login

Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes.

Affected products Warnungen 0 Metrics 3 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

3reality ≫ 3rsb015bz Firmware Version1.00.54

3reality ≫ 3rsb015bz Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.25%	0.478

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

https://github.com/iot-sec23/IoT-CVE/blob/main/Third%20Reality%20Smart%20Blind%20Vulnerability%20Report.pdf

Third Party Advisory

Exploit

https://www.3reality.com/

Product

https://nvd.nist.gov/vuln/detail/CVE-2023-29780

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-29780

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-29780

EUVD