Skip to content
OpenAdvisories
Low · 3.5 CVE-2024-3454 EUVD-2024-32041GHSA-5w32-hrcv-cfhw

In-Fabric Matter Cluster Attribute Disclosure

Published Jul 24, 2024 · Updated Aug 1, 2024 · Assigned by Bitdefender

Description

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.

Affected products

VendorProductAffectedFixed
Connectivity Standards Alliance connectedhomeip 1.2.0.1 —

References