PT-2021-20558 · Kaden · Kaden Picoflux Air

Published 2021-09-16 · Updated 2021-09-27 · CVE-2021-34576

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Kaden PICOFLUX Air (affected versions not specified)

Description: The issue concerns an information exposure through observable discrepancy. This discrepancy may provide sensitive information, such as water consumption without distinct values, to third parties.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Side Channel Attack

Weakness Enumeration

CWE-203

Related Identifiers

CVE-2021-34576

Affected Products

Kaden Picoflux Air

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-34576 · Security Note
• https://t.me/cibsecurity/28973 · Telegram Post
• https://fit.vutbr.cz/~polcak/CVE-2021-34576.en · Note