An issue was discovered in Airties Smart Wi-Fi before... · CVE-2022-38789 · GitHub Advisory Database · GitHub

An issue was discovered in Airties Smart Wi-Fi before...

Critical severity Unreviewed Published Sep 16, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

An issue was discovered in Airties Smart Wi-Fi before 2020-08-04. It allows attackers to change the main/guest SSID and the PSK to arbitrary values, and map the LAN, because of Insecure Direct Object Reference.

References

Published by the National Vulnerability Database

Sep 15, 2022

Published to the GitHub Advisory Database Sep 16, 2022

Last updated Jan 29, 2023

Severity

Critical

9.1

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N