Nanoleaf

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Nanoleaf records in CISA KEV

No Nanoleaf vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Nanoleaf Firmware · all components

TI-2022-23697 CVE-2022-47758 · GHSA-hm5x-4jqq-qcmg

HIGH 82

Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01195 Published 2023-04-27 No fix listed CWE-295