CVE-2024-3454

LowCVSS 3.5/10Last modified Jun 17, 2026

Description

An implementation issue in the Connectivity Standards Alliance Matter 1.2 protocol as used in the connectedhomeip SDK allows a third party to disclose information about devices part of the same fabric (footprinting), even though the protocol is designed to prevent access to such information.

Metrics

CVSS 3.1 3.5/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-209

Affected software

No affected versions have been published.

Timeline

Published
Jul 24, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2024

CVE-2024-345425.7Advantech ADAM-5630 shares user credentials plain text between the device and the user source device during the login process.CVE-2024-345437.8Improper access control in Intel(R) RAID Web Console software for all versions may allow an authenticated user to potentially enable escalatCVE-2024-345447.2A command injection vulnerability exists in the wireless.cgi AddMac() functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafteCVE-2024-345455.7Improper input validation in some Intel(R) RAID Web Console software all versions may allow an authenticated user to potentially enable infoCVE-2024-345465.9Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Habibur Rahman Sticky Social Link sticCVE-2024-345475.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noor alam Magical Addons For ElementorCVE-2024-345486.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themesgrove WidgetKit allows Stored XSCVE-2024-345495.3Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Automattic WP Job Manager.This issue affects WP Job Manager: froCVE-2024-34559.8A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3. It has been declared as critical. Affected by this vulnerabiCVE-2024-345505.3Insertion of Sensitive Information into Log File vulnerability in AlexaCRM Dynamics 365 Integration.This issue affects Dynamics 365 IntegratCVE-2024-345519.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local FilCVE-2024-345528.8Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Select-Themes Stockholm allows PHP Local Fil
CVE-2024-3454: Low severity, CVSS 3.5 | Vulnix