Approved changes feed: RSS · Atom

cpe:2.3:h:ecobee:ecobee4:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorEcobee (f988dcb8-de7c-5754-bb11-8b56233827fa)
ProductEcobee4 (d5130556-cf62-5eb5-8861-a463b6087f96)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-6402 not_vulnerable 2026-06-08 05:11:53.699266 Details available
Ecobee Ecobee4 4.2.0.171 devices can be forced to deauthenticate and connect to an unencrypted Wi-Fi network with the same SSID, even if the device settings specify use of encryption such as WPA2, as long as the competing network has a stronger signal. An attacker must be able to set up a nearby SSID, similar to an "Evil Twin" attack.
Published: 2020-04-14T18:40:34.000Z
Updated: 2024-08-05T06:01:49.165Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.