Dashboard / CVE-2024-34268

CVE-2024-34268

HIGH
MEDIUM Priority: 0.02 BB Relevance: 59/100
Published: 2026-07-16 Modified: 2026-10-27 First seen: 2026-10-29 Status: active

Attack Surface

Adjacent Low Complexity No Auth No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Adjacent
AC: Low
PR: None
UI: None
S: Unchanged
C: None
I: High
A: Low

Description

EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat Firmware up to the latest version 1.46 was discovered to allow unsecured bluetooth connections. This vulnerability allows attackers to gain full access to the device without authentication.

Weakness Classification (1)

References & Advisories (2)

Bug Bounty Relevance

59 / 100
✓ No authentication
✓ Low complexity
✓ No user interaction

CVSS Score

7.1 / 10.0 v3.1
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L

EPSS — Exploitation Probability

0.32%
Raw Score 0.003180
Percentile 24.8%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00318
2026-10-28
0.00318

Intelligence Sources

nvd ref →

External Links