Vulnerabilities

TI-2016-04372 CVE-2016-5054 · GHSA-62cf-28f6-qqmv

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.

LOW 35

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01148 Published 2017-04-10 No fix listed CWE-284

TI-2016-04371 CVE-2016-5053 · GHSA-px24-4cwf-8gx4

MEDIUM 47

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02737 Published 2017-04-10 No fix listed CWE-306

TI-2016-04370 CVE-2016-5052 · GHSA-vpvm-wrg6-pmr4

LOW 35

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01136 Published 2017-04-10 No fix listed CWE-254

TI-2016-04369 CVE-2016-5051 · GHSA-gg2r-j7f9-93qp

LOW 36

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01397 Published 2017-04-10 No fix listed CWE-200