Nanoleaf

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Nanoleaf records in CISA KEV

No Nanoleaf vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Nanoleaf Desktop · all components

TI-2022-23049 CVE-2022-46640 · GHSA-f8x4-74pw-c6pm

HIGH 82

Nanoleaf Desktop App before v1.3.1 was discovered to contain a command injection vulnerability which is exploited via a crafted HTTP request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0186 Published 2023-04-18 No fix listed CWE-77