CVE-2024-47079

Name of the Vulnerable Software and Affected Versions Meshtastic firmware versions prior to 2.5.1

Description The issue arises from the remote hardware module of the Meshtastic firmware not having proper checks to ensure that a remote hardware control message was received and should be considered valid. This allows for potential manipulation of unknown processes. All users are advised to upgrade to address this issue.

Recommendations For Meshtastic firmware versions prior to 2.5.1, upgrade to release version 2.5.1 to resolve the issue. As a temporary workaround, consider restricting access to the remote hardware control module until the upgrade is applied.