Vulnerabilities > CVE-2024-3454 - Unspecified vulnerability in Csa-Iot Matter

047910
CVSS 3.5 - LOW
Attack vector
ADJACENT_NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
low complexity
csa-iot

Summary

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.

Vulnerable Configurations

Part Description Count
Application
Csa-Iot
1