CVE-2024-46040

n/a / n/a PUBLISHED

Description (CNA)

IoT Haat Smart Plug IH-IN-16A-S IH-IN-16A-S v5.16.1 suffers from Insufficient Session Expiration. The lack of validation of the authentication token at the IoT Haat during the Access Point Pairing mode leads the attacker to replay the Wi-Fi packets and forcefully turn off the access point after the authentication token has expired.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://github.com/Anonymous120386/Anonymous
https://www.iothaat.com/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.