CVE-2024-46041

Summary

CVE-2024-46041 is a newly identified vulnerability affecting the IoT Haat Smart Plug IH-IN-16A-S version 5.16.1. This issue enables an attacker to bypass the authentication process through capture-replay attacks. An unauthorized user can intercept and reuse valid authentication credentials to gain unauthorized access to the smart plug, potentially leading to control over connected devices and networks. The vulnerability poses a significant risk to IoT security, as authentication bypass can facilitate further unauthorized activities. Users are advised to update their smart plug firmware to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.