ESPHome ESPHome Firmware

CPE Details

ESPHome ESPHome Firmware
esphome
esphome_firmware
-
2021-10-05
11h54 +00:00
2021-10-07
18h05 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:o:esphome:esphome_firmware:-:*:*:*:*:*:*:*

Informations

Vendor

esphome

Product

esphome_firmware

Version

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-41104 2021-09-28 13h15 +00:00 ESPHome is a system to control the ESP8266/ESP32. Anyone with web_server enabled and HTTP basic auth configured on version 2021.9.1 or older is vulnerable to an issue in which `web_server` allows over-the-air (OTA) updates without checking user defined basic auth username & password. This issue is patched in version 2021.9.2. As a workaround, one may disable or remove `web_server`.
7.5
High