Radiothermostat Ct50 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Radiothermostat Ct50 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2013-4860 — CVSS 8.3 (high): Radio Thermostat CT80 And CT50 with firmware 1.4.64 and earlier does not restrict access to the API, which allows remote attackers to…
• CVE-2018-11315 — CVSS 6.5 (medium): The Local HTTP API in Radio Thermostat CT50 and CT80 1.04.84 and below products allows unauthorized access via a DNS rebinding attack. This…