PatchTheCVEtasmota vulnerabilities and fixes
Recent CVEs affecting tasmota, with upgrade or downgrade steps. 2 tracked.
tasmota has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2023-01-09. Highest priority: CVE-2022-43294 (score 55/100).
- CVE-2022-43294 CRITICAL 9.8 UPGRADE Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via
- CVE-2021-36603 MEDIUM 6.1 MITIGATE Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a c
FAQ
How do I fix tasmota vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is tasmota being exploited right now?
None of the tracked tasmota CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which tasmota CVE should I patch first?
CVE-2022-43294 currently ranks highest (55/100): Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via .