Connected Standards Alliance Matter SDK
Approved changes feed: RSS · Atom
cpe:2.3:a:csa-iot:matter:-:*:*:*:*:*:*:*
part: a version: - update: *
| Vendor | Csa Iot (95498e72-bc5b-552d-95f1-a2852b814a75) |
|---|---|
| Product | Matter (4cdd8148-e0a5-5210-8f60-9b47153cde8c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/project-chip/connectedhomeip |
purl2cpe | 2026-06-01 10:15:01.860676 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-3454 |
vulnerable | 2026-06-08 06:41:53.330869 |
In-Fabric Matter Cluster Attribute Disclosure
LOW (3.5)
An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.
Published: 2024-07-24T07:58:40.219Z
Updated: 2024-08-01T20:12:06.908Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-3297 |
vulnerable | 2026-06-08 06:41:52.899702 |
Session establishment lock-up during replay of CASE Sigma1 messages
MEDIUM (6.5)
An issue in the Certificate Authenticated Session Establishment (CASE) protocol for establishing secure sessions between two devices, as implemented in the Matter protocol versions before Matter 1.1 allows an attacker to replay manipulated CASE Sigma1 messages to make the device unresponsive until the device is power-cycled.
Published: 2024-07-24T08:02:52.777Z
Updated: 2024-08-01T20:05:08.480Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.