Osram

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Osram records in CISA KEV

No Osram vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Lightify Home · all components

TI-2016-04371 CVE-2016-5053 · GHSA-px24-4cwf-8gx4

MEDIUM 47

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02737 Published 2017-04-10 No fix listed CWE-306

TI-2016-04369 CVE-2016-5051 · GHSA-gg2r-j7f9-93qp

LOW 36

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01397 Published 2017-04-10 No fix listed CWE-200

TI-2016-04372 CVE-2016-5054 · GHSA-62cf-28f6-qqmv

LOW 35

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01148 Published 2017-04-10 No fix listed CWE-284

TI-2016-04370 CVE-2016-5052 · GHSA-vpvm-wrg6-pmr4

LOW 35

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01136 Published 2017-04-10 No fix listed CWE-254