Core Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:taphome:core_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Taphome (6474f111-450e-5c74-8377-20b7a3513038) |
|---|---|
| Product | Core Firmware (b74abf5b-dd0e-5606-9092-b4f0516e7e17) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-2760 |
vulnerable | 2026-06-08 06:02:42.962162 |
TAPHOME SQL Injection in Core Platform
HIGH (7.6)
An SQL injection vulnerability exists in TapHome core HandleMessageUpdateDevicePropertiesRequest function before version 2023.2, allowing low privileged users to inject arbitrary SQL directives into an SQL query and execute arbitrary SQL commands and get full reading access. This may also lead to limited write access and temporary Denial-of-Service.
Published: 2023-07-17T06:14:32.851Z
Updated: 2024-10-22T13:58:08.435Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-2759 |
vulnerable | 2026-06-08 06:02:42.961004 |
TAPHOME Improper Authentication in Core Platform
HIGH (8.8)
A hidden API exists in TapHome's core platform before version 2023.2 that allows an authenticated, low privileged user to change passwords of other users without any prior knowledge. The attacker may gain full access to the device by using this vulnerability.
Published: 2023-07-17T06:14:15.872Z
Updated: 2024-10-30T14:55:16.810Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.