VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 5, 2014· Updated Jun 16, 2026

CVE-2013-4860

CVE-2013-4860

Description

Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to change the operation mode, wifi connection settings, temperature thresholds, and other settings via unspecified vectors.

Affected products

6
  • Radiothermostat/Ct502 versions
    cpe:2.3:h:radiothermostat:ct50:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:radiothermostat:ct50:-:*:*:*:*:*:*:*
    • (no CPE)range: <=1.4.64
  • Radiothermostat/Ct802 versions
    cpe:2.3:h:radiothermostat:ct80:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:radiothermostat:ct80:-:*:*:*:*:*:*:*
    • (no CPE)range: <=1.4.64
  • Radiothermostat/Ct50 Firmware
    cpe:2.3:o:radiothermostat:ct50_firmware:*:*:*:*:*:*:*:*
    Range: <=1.4.64
  • Radiothermostat/Ct80 Firmware
    cpe:2.3:o:radiothermostat:ct80_firmware:*:*:*:*:*:*:*:*
    Range: <=1.4.64

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.