CVE Vulnerabilities

CVE-2024-3454

Published: Jul 24, 2024 | Modified: Sep 10, 2024
CVSS 3.x
3.5
LOW
Source:
NVD
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.

Affected Software

Name Vendor Start Version End Version
Matter Csa-iot - (including) - (including)

References