Threats tagged 'ghsa-g6hm-9f8q-5ghc'

Cudy TR3000 devices running firmware versions before 2.5.42 have a vulnerability in the mt_wifi Smart Mesh Technology onboarding process. The vulnerability arises from insufficient verification of data authenticity, where messages are protected only by an AES-CBC key derived from public values and a CRC32 check. This allows adjacent unauthenticated attackers to forge Smart Mesh Technology messages in Probe Request vendor information elements, carrying attacker-chosen SSIDs and pre-shared keys. As a result, unpaired devices can be forced to join attacker-controlled access points.