You do not have permission to edit this page, for the following reasons:
CVE-2024-23738 is a command injection flaw in the Kidde Smart smoke and carbon monoxide alarms (CVSS 9.8, Critical). An attacker on the local network can send a crafted command to the device, which causes a denial-of-service condition and may allow code execution. If the alarm is disabled by an attacker, it no longer warns the residents about smoke or carbon monoxide, which creates a direct physical safety risk. The device receives firmware updates rarely, so the exposure lasts a long time.
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
