← Back

CVE-2024-47079

nvd nist
Published: Oct 7, 2024Modified: Jun 17, 2026

JSON object

Loading...
6.4
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Exploitability: 1.6 / Impact: 4.7
Source: security-advisories@github.com (Secondary)

Description

Meshtastic is an open source, off-grid, decentralized, mesh network built to run on affordable, low-power devices. Meshtastic firmware is an open source firmware implementation for the broader project. The remote hardware module of the firmware does not have proper checks to ensure a remote hardware control message was received should be considered valid. This issue has been addressed in release version 2.5.1. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected (1)

Meshtastic
1 product
Meshtastic Firmware
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Meshtastic Firmware
Before 2.5.1

Related CWEs

CWE-345
Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References (1)

Source: security-advisories@github.com
Vendor Advisory

Timeline

No history available yet.