Approved changes feed: RSS · Atom

cpe:2.3:o:belwith-keeler:hickory_smart_ethernet_bridge_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorBelwith Keeler (312adbc4-2488-5a63-bf9d-2fc46dc26305)
ProductHickory Smart Ethernet Bridge Firmware (6c6edcdb-51fb-5bed-929c-6fa87f5f39e1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5635 vulnerable 2026-06-08 05:14:07.907286 Hickory Smart Lock Cleartext Password
MEDIUM (6.5)
A cleartext transmission of sensitive information vulnerability is present in Hickory Smart Ethernet Bridge from Belwith Products, LLC. Captured data reveals that the Hickory Smart Ethernet Bridge device communicates over the network to an MQTT broker without using encryption. This exposed the default username and password used to authenticate to the MQTT broker. This issue affects Hickory Smart Ethernet Bridge, model number H077646. The firmware does not appear to contain versioning information.
Published: 2019-08-22T13:51:37.081Z
Updated: 2024-09-16T20:07:32.589Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.