EquesHome Elf Smart Plug Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:equeshome:elf_smart_plug_firmware:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Equeshome (3f4296ea-5695-5db6-93a3-cba993d9ef87) |
|---|---|
| Product | Elf Smart Plug Firmware (3b0b35ff-62e5-58d9-9450-b98dfef3c2af) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-15745 |
vulnerable | 2026-06-08 05:12:57.913875 |
Details available
The Eques elf smart plug and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. The communication happens over UDP port 27431. An attacker on the local network can use the same key to encrypt and send commands to discover all smart plugs in a network, take over control of a device, and perform actions such as turning it on and off.
Published: 2019-08-29T12:40:53.000Z
Updated: 2024-08-05T00:56:22.397Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.