PT-2020-14463 · Smarter · Smarter Coffee Maker

Martin Hron · Published 2020-10-07 · Updated 2024-08-04 · CVE-2020-15501

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Smarter Coffee Maker versions before 2nd generation

Description The issue allows firmware replacement without authentication or authorization. User interaction is required to press a button. This problem only affects products that are no longer supported by the maintainer.

Recommendations For Smarter Coffee Maker versions before 2nd generation, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2020-15501

Affected Products

Smarter Coffee Maker

References · 4

• 🔥 https://decoded.avast.io/martinhron/the-fresh-smell-of-ransomed-coffee · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-15501 · Security Note
• https://t.me/cibsecurity/15137 · Telegram Post
• https://t.me/cvenotify/88996 · Telegram Post