Nanoleaf kayıtları
nanoleaf üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-295 Improper Certificate Validation1
- CWE-400 Uncontrolled Resource Consumption1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2022-46640İstismar yok | Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP requestnanoleaf · nanoleaf desktop · CWE-77 | Kritik9,8 | — | %1,8 | 18 Nis 2023 |
39İzleyin | CVE-2022-47758İstismar yok | Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.nanoleaf · nanoleaf firmware · CWE-295 | Kritik9,8 | — | %1,1 | 26 Nis 2023 |
30İzleyin | CVE-2023-42189İstismar yok | Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee Lnanoleaf · lightstrip firmware · CWE-732 | Yüksek7,5 | — | %1,0 | 9 Eki 2023 |
30İzleyin | CVE-2023-45955İstismar yok | An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commannanoleaf · lightstrip firmware · CWE-400 | Yüksek7,5 | — | %0,5 | 31 Eki 2023 |
- CVE-2022-4664040Planlayın
Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request
KritikCVSS 9,8İstismar yokEPSS %1nanoleaf · nanoleaf desktop18 Nis 2023
- CVE-2022-4775839İzleyin
Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.
KritikCVSS 9,8İstismar yokEPSS %1nanoleaf · nanoleaf firmware26 Nis 2023
- CVE-2023-4218930İzleyin
Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee L
YüksekCVSS 7,5İstismar yokEPSS %1nanoleaf · lightstrip firmware9 Eki 2023
- CVE-2023-4595530İzleyin
An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute comman
YüksekCVSS 7,5İstismar yokEPSS %0nanoleaf · lightstrip firmware31 Eki 2023