Tasmota

CVEs (2)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-36603	Tasmota Tasmota	Med	0.40	6.1	0.01		Jan 9, 2023	Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
CVE-2022-43294	Tasmota Tasmota	Cri	0.00	9.8	0.01		Nov 14, 2022	Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.

CVE-2021-36603MedJan 9, 2023
Tasmota
Tasmota
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
CVE-2022-43294CriNov 14, 2022
Tasmota
Tasmota
risk 0.00cvss 9.8epss 0.01
Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.