VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 23, 2024· Updated Jun 17, 2025

CVE-2023-46892

CVE-2023-46892

Description

The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions (e.g., thermostat's temperature).

Affected products

2
  • Meross/MSH30Qdescription
  • Meross/MSH30Qllm-fuzzy
    Range: =4.5.23

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.