Meross vulnerabilities
We track 1 vulnerability in Meross products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 23, 2024.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Meross vulnerabilities
- 8.8 High severity
msh30q: Authentication Bypass by Capture-replay
The radio frequency communication protocol being used by Meross MSH30Q 4.5.23 is vulnerable to replay attacks, allowing attackers to record and replay previously captured communication to execute unauthorized commands or actions (e.g., thermostat's temperature