Tasmota ProjectCVEs & Vulnerabilities
2 CVEs affecting Tasmota Project products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
tasmota 2
CVE-2021-36603MEDIUM
Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1".
10 Jan 2023
6.1
CVSS
CVE-2022-43294CRITICAL
Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/CRtspSession.cpp.
15 Nov 2022
9.8
CVSS
← PrevPage 1 / 1Next →