Remote Hardware Control Oversight in Meshtastic Firmware by Meshtastic
CVE-2024-47079

Currently unrated

Key Information:

Vendor

Meshtastic

Status
Meshtastic Firmware
Vendor
CVE Published:
7 October 2024

What is CVE-2024-47079?

The Meshtastic firmware, designed for open-source, off-grid mesh networking, contains a flaw whereby remote hardware control messages are not adequately validated for authenticity. This oversight can potentially allow unauthorized message processing, leading to trust issues within the network. Users are highly encouraged to update to version 2.5.1 or later, as no alternative workarounds exist to mitigate this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/meshtastic/firmware/security/advisorie...

Timeline

  • Vulnerability published

JSON
.