Skip to content
OpenAdvisories

Vendor

Shenzhen Cudy Technology

23 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.8

    Cudy TR3000 before 2.5.42 SMT Message Forgery via Probe Request Vendor IE

    Cudy TR3000 before 2.5.42 contains an insufficient verification of data authenticity vulnerability in the mt_wifi Smart Mesh Technology (SMT) onboarding, which protects messages only with an AES-CBC key derived from public values and a CRC32 check. Adjacent u…

  • Medium 5.9

    Cudy TR3000 before 2.5.42 Stack Buffer Overflow via obuspa KeyPassphrase Getter

    Cudy TR3000 before 2.5.42 contains a stack buffer overflow vulnerability in an obuspa getter for the TR-098 WLANConfiguration KeyPassphrase parameter, which copies the stored value with strcpy() into a 4,096-byte stack buffer without a length check. A malicio…