CVE-2024-34268

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections

High · published July 16, 2026

CVSS v3.1
7.1
EPSS
0%
Percentile
23.6
In the wild
Unconfirmed
What it is

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AC:L/AV:A/A:L/C:N/I:H/PR:N/S:U/UI:N
CVSS v4.0
Not supplied
EPSS
0.00318 · 23.6th percentile
Published
2026-07-16T00:00Z
EPSS history
Timeline
  • 16 JUL 00:00Z
    EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections
    cvelistv5