cvedb.io
CVE-2024-3454
LOW · CVSS 3.5
EPSS exploitation probability: 0%
Published 2024-07-24T08:15:03.123 · Last modified 2026-06-17T07:44:17.897

Summary

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.

Affected products

csa-iot — matter

Does this affect you?

Add your gear to cvedb and we'll alert you only when csa-iot ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.