Tonewinner

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tonewinner records in CISA KEV

No Tonewinner vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Winner Desktop Speakers Firmware 1 record LOW

Records

1 record

TI-2021-15972 CVE-2021-38365 · GHSA-c73h-35x4-2493

Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to…

LOW 20

Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.01164 Published 2021-08-10 No fix listed

Open these records in search →

Critical	0
High	0
Medium	0
Low	1
No CVSS	0