PatchTheCVEsonoff vulnerabilities
Recent CVEs affecting sonoff products. 1 tracked.
sonoff has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-01-21. Highest priority: CVE-2020-7470 (score 34/100).
- CVE-2020-7470 MEDIUM 4.8 MITIGATE MITIGATE Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successfu
FAQ
How do I fix sonoff vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is sonoff being exploited right now?
None of the tracked sonoff CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which sonoff CVE should I patch first?
CVE-2020-7470 currently ranks highest (34/100): Sonoff TH 10 and 16 devices with firmware 6.6.0.21 allows XSS via the Friendly Name 1 field (after a successfu.