CVE-2024-46040

Summary

CVE-2024-46040 is a vulnerability affecting the IoT Haat Smart Plug IH-IN-16A-S in version 5.16.1. This issue involves insufficient session expiration, allowing an attacker to replay Wi-Fi packets during the Access Point Pairing mode. As a result, the attacker can forcefully turn off the access point even after the authentication token has expired. This flaw poses a significant risk to network security, enabling unauthorized access and potential control of connected devices. Users are advised to update their smart plugs to the latest firmware version to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.