An issue was discovered on Sigma Design Z-Wave S0 through S2 devices. Rated medium severity (CVSS 6.5), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
HashiCorp Consul 0.5.1 through 1.4.0 can use cleartext agent-to-agent RPC communication because the verify_outgoing setting is improperly documented. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required.
An issue was discovered on KT MC01507L Z-Wave S0 devices. Rated medium severity (CVSS 5.3), this vulnerability is no authentication required. No vendor patch available.