Vendors / Osram Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 6
Exploited now Osram records in CISA KEV No Osram vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 47
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02737 · Published 2017-04-10 · No fix listed CWE-306
Priority LOW 36
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01397 · Published 2017-04-10 · No fix listed CWE-200
Priority LOW 35
OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01148 · Published 2017-04-10 · No fix listed CWE-284
Priority LOW 35
OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01211 · Published 2017-04-10 · No fix listed CWE-254
Priority LOW 35
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00934 · Published 2017-04-10 · No fix listed CWE-326
Priority LOW 35
OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01148 · Published 2017-04-10 · No fix listed CWE-284
Priority LOW 35
OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.01136 · Published 2017-04-10 · No fix listed CWE-254
Priority LOW 31
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application.
CVSS 3.0 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01153 · Published 2017-04-10 · No fix listed CWE-200
Priority LOW 29
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page.
CVSS 3.0 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00819 · Published 2017-04-10 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
1 6 2 0 0
THREATIST.IORead the docs