Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HEve Door And Window
HWEveall versionsEve Door And Window Firmware
OSEveall versionsGovee Led Strip
HWGoveeall versionsGovee Led Strip Firmware
OSGovee3.00.42Nanoleaf Lightstrip
HWNanoleafall versionsNanoleaf Lightstrip Firmware
OSNanoleaf3.5.10Orein Smart Bulb
HWOreinall versionsOrein Smart Bulb Firmware
OSOreinall versionsPhillips Hue Bridge
HWPhillipsall versionsPhillips Hue Bridge Firmware
OSPhillips1.59.1959097030Switchbot Hub2
HWSwitchbotall versionsSwitchbot Hub2 Firmware
OSSwitchbot1.0-0.8Tapo Mini Smart Wi Fi Plug
HWTapoall versionsTapo Mini Smart Wi Fi Plug Firmware
OSTapoall versionsTp Link Smart Plug
HWTp-Linkall versionsTp Link Smart Plug Firmware
OSTp-Linkall versionsYeelight Smart Lamp
HWYeelightall versionsYeelight Smart Lamp Firmware
OSYeelight1.12.69
Related vulnerabilities
An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted ...
An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move...
A pre-authentication OS command injection vulnerability has been identified in Omada gateways configured to op...
Command injection w bramkach Omada (TP-Link) po uwierzytelnieniu admina
Zdalne wykonanie poleceń OS bez uwierzytelnienia w routerach TP-Link Omada