ecobee ecobee4 Firmware 4.2.0.171
Approved changes feed: RSS · Atom
cpe:2.3:o:ecobee:ecobee4_firmware:4.2.0.171:*:*:*:*:*:*:*
part: o version: 4.2.0.171 update: *
| Vendor | Ecobee (f988dcb8-de7c-5754-bb11-8b56233827fa) |
|---|---|
| Product | Ecobee4 Firmware (f4892d99-5282-57d4-82ae-6d757f6c5ce2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-6402 |
vulnerable | 2026-06-08 05:11:53.698502 |
Details available
Ecobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an unencrypted Wi-Fi network with the same SSID, even if the device settings specify use of encryption such as WPA2, as long as the competing network has a stronger signal. An attacker must be able to set up a nearby SSID, similar to an "Evil Twin" attack.
Published: 2020-04-14T18:40:34.000Z
Updated: 2024-08-05T06:01:49.165Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.