PT-2017-6500 · Netatmo · Netatmo Indoor Module

Published 2017-08-28 · Updated 2018-10-09 · CVE-2015-1600

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Netatmo Indoor Module versions 100 and earlier

Description The issue is related to an information disclosure vulnerability.

Recommendations For versions 100 and earlier, update to a version later than 100 to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2015-1600

Affected Products

Netatmo Indoor Module

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-1600 · Security Note
• http://securityfocus.com/bid/72622 · Note
• https://isc.sans.edu/forums/diary/Did+You+Remove+That+Debug+Code+Netatmo+Weather+Station+Sending+WPA+Passphrase+in+the+Clear/19327 · Note
• http://packetstormsecurity.com/files/130401/Netatmo-Weather-Station-Cleartext-Password-Leak.html · Note
• http://securityfocus.com/archive/1/534707/100/1600/threaded · Note