CVE-2021-34576

Published: Sep 16, 2021Modified: Jun 17, 2026

4.3

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

In Kaden PICOFLUX Air in all known versions an information exposure through observable discrepancy exists. This may give sensitive information (water consumption without distinct values) to third parties.

Affected (1)

Products: Kadenvodomery: Picoflux Air Firmware

Kadenvodomery

1 product

Picoflux Air Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Kadenvodomery Picoflux Air Firmware	All versions

Running on/with	Platform Versions
Kadenvodomery Picoflux Air	All versions

Related CWEs

CWE-203

Observable Discrepancy

The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.

References (2)

https://www.fit.vutbr.cz/~polcak/CVE-2021-34576.en

Source: info@cert.vde.com

Third Party Advisory

https://www.fit.vutbr.cz/~polcak/CVE-2021-34576.en

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.