What is CVE-2024-34268?

CVE-2024-34268 is a high-severity vulnerability in N/a, classified under Missing Authentication for Critical Function. CVSS score: 7.1/10. Published 2026-07-16.

How severe is CVE-2024-34268?

High severity. CVSS v3 base score is 7.1 out of 10.

Auth bypass in N/a

CVE-2024-34268

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication.

Vulnerability class: Broken Authentication

EPSS: 0.003 (24.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L.

Affected products

N/a — versions n/a

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2024-34268?: CVE-2024-34268 is a high-severity vulnerability in N/a, classified under Missing Authentication for Critical Function. CVSS score: 7.1/10. Published 2026-07-16.
How severe is CVE-2024-34268?: High severity. CVSS v3 base score is 7.1 out of 10.