cve.bz

CVE-2024-3454

3.5 lowEPSS 0.2%

Low (3.5) in csa-iot matter. EPSS 0.2% chance of exploitation in the next 30 days.

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.

Severity

CVSS 3.1

3.5 low
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-10-31)
CWE
CWE-209
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON