PT-2026-25551 · Tuya+1 · Arduino-Tuyaopen
CVSS v4.0
8.6
High
| Vector | AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
arduino-TuyaOpen versions prior to 1.2.1
Description
arduino-TuyaOpen before version 1.2.1 contains a single-byte buffer overflow in the
WiFiMulti component. When a device connects to an attacker-controlled access point (AP), an attacker can exploit this overflow to execute arbitrary code on the affected embedded device.Recommendations
Update arduino-TuyaOpen to version 1.2.1 or later.
Exploit
Fix
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Arduino-Tuyaopen