Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HEve Door And Window
HWEvewszystkie wersjeEve Door And Window Firmware
OSEvewszystkie wersjeGovee Led Strip
HWGoveewszystkie wersjeGovee Led Strip Firmware
OSGovee3.00.42Nanoleaf Lightstrip
HWNanoleafwszystkie wersjeNanoleaf Lightstrip Firmware
OSNanoleaf3.5.10Orein Smart Bulb
HWOreinwszystkie wersjeOrein Smart Bulb Firmware
OSOreinwszystkie wersjePhillips Hue Bridge
HWPhillipswszystkie wersjePhillips Hue Bridge Firmware
OSPhillips1.59.1959097030Switchbot Hub2
HWSwitchbotwszystkie wersjeSwitchbot Hub2 Firmware
OSSwitchbot1.0-0.8Tapo Mini Smart Wi Fi Plug
HWTapowszystkie wersjeTapo Mini Smart Wi Fi Plug Firmware
OSTapowszystkie wersjeTp Link Smart Plug
HWTp-Linkwszystkie wersjeTp Link Smart Plug Firmware
OSTp-Linkwszystkie wersjeYeelight Smart Lamp
HWYeelightwszystkie wersjeYeelight Smart Lamp Firmware
OSYeelight1.12.69
Related vulnerabilities
An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted ...
An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move...
Zdalne wykonanie poleceń OS bez uwierzytelnienia w routerach TP-Link Omada
Command injection w bramkach Omada (TP-Link) po uwierzytelnieniu admina
TP-Link TL-WR845N — zakodowane na stałe hasło roota (hardcoded password)