CVE-2024-34268

The EQ-3 Eqiva CC-RT-BLE Bluetooth Smart Radiator Thermostat firmware versions up to 1.46 is vulnerable due to unsecured Bluetooth connections, enabling attackers to gain full, unauthenticated access to the device. This poses a significant risk as it could lead to unauthorized control over heating systems, potentially compromising user safety and privacy. Organizations and individuals using this thermostat should prioritize immediate updates or mitigations to safeguard against potential exploitation.