Tasmota Project Tasmota
2 CVEs affecting Tasmota Project Tasmota. Latest disclosed: 2023-01-09. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-43294 | Critical | 9.8 | 2022-11-14 | Tasmota before commit 066878da4d4762a9b6cb169fdf353e804d735cfd was discovered to contain a stack overflow via the ClientPortPtr parameter at lib/libesp32/rtsp/… |
CVE-2021-36603 | Medium | 6.1 | 2023-01-09 | Cross Site Scripting (XSS) in Tasmota firmware 6.5.0 allows remote attackers to inject JavaScript code via a crafted string in the field "Friendly Name 1". |