Meross MSH30Q 4.5.23 is vulnerable to Cleartext Transmission of Sensitive Information. During the device setup phase, the MSH30Q creates an unprotected Wi-Fi access point. In this phase, MSH30Q needs to connect to the Internet through a Wi-Fi router. This is why MSH30Q asks for the Wi-Fi network name (SSID) and the Wi-Fi network password. When the user enters the password, the transmission of the Wi-Fi password and name between the MSH30Q and mobile application is observed in the Wi-Fi network. Although the Wi-Fi password is encrypted, a part of the decryption algorithm is public so we complemented the missing parts to decrypt it.
References
| Link | Resource |
|---|---|
| https://www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219 | Third Party Advisory |
| https://www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219 | Third Party Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 08:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219 - Third Party Advisory |
31 Jan 2024, 16:36
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-319 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.7 |
| CPE | cpe:2.3:h:meross:msh30q:-:*:*:*:*:*:*:* cpe:2.3:o:meross:msh30q_firmware:4.5.23:*:*:*:*:*:*:* |
|
| References | () https://www.kth.se/cs/nse/research/software-systems-architecture-and-security/projects/ethical-hacking-1.1279219 - Third Party Advisory |
23 Jan 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-23 20:15
Updated : 2025-06-17 16:15
NVD link : CVE-2023-46889
Mitre link : CVE-2023-46889
CVE.ORG link : CVE-2023-46889
JSON object : View
Products Affected
meross
- msh30q
- msh30q_firmware
CWE
CWE-319
Cleartext Transmission of Sensitive Information