CVE-2018-15479

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip…

published August 30, 2018

CVSS
—
EPSS
1%
Percentile
55.7
In the wild
Unconfirmed
What it is

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. Devices did not authenticate themselves to the cloud in device to cloud communication. This lack of device authentication allowed an attacker to impersonate any device by guessing or learning their MAC address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00787 · 55.7th percentile
Published
2018-08-30T17:00Z
EPSS history
Timeline
  • 30 AUG 17:00Z
    An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip…
    cvelistv5