CVE-2024-3764

LOW Year: 2024
CVSS v3 Score
2.7
Low
CVSS v2 Score
3.3
Low
Weakness Type
CWE-404
View all →

Vulnerability Description

** DISPUTED ** A vulnerability classified as problematic has been found in Tuya SDK up to 5.0.x. Affected is an unknown function of the component MQTT Packet Handler. The manipulation leads to denial of service. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. Upgrading to version 5.1.0 is able to address this issue. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-260604. NOTE: The vendor explains that a malicious actor would have to crack TLS first or use a legitimate login to initiate the attack.

Related Vulnerabilities

CVE-2024-20905

LOW
CVSS:2.7(Low)

Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions that are affected are Prior to 9.2.8.0. Easily exploitab...

CWE-4042024

CVE-2024-7887

MEDIUM
CVSS:2.7(Low)

A vulnerability was found in LimeSurvey 6.3.0-231016 and classified as problematic. Affected by this issue is some unknown functionality of the file /index.php of the component File Upload. The manipu...

CWE-4042024

CVE-2025-1376

LOW
CVSS:2.5(Low)

A vulnerability classified as problematic was found in GNU elfutils 0.192. This vulnerability affects the function elf_strptr in the library /libelf/elf_strptr.c of the component eu-strip. The manipul...

CWE-4042025

CVE-2024-20995

LOW
CVSS:2.4(Low)

Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.22 and 21.3-21.13. Easily exploitable vulnerability allows high priv...

CWE-4042024

CVE-2025-1207

LOW
CVSS:3.1(Low)

A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of servi...

CWE-4042025

CVE-2025-3122

LOW
CVSS:3.1(Low)

A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reade...

CWE-4042025