CVE-2018-15477: Mystrom Wifi Switch Firmware

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

myStrom WiFi Switch V1 devices before 2.66 did not sanitize a parameter received from the cloud that was used in an OS command. Malicious servers were able to run operating system commands on the device.

Affected products

• Mystrom Wifi Switch Firmware: before 2.66 (fixed in 2.66)

Published 2018-08-30. Last modified 2026-06-17.