Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: Govee Clear all filters
TI-2025-09990 CVE-2025-10910 · GHSA-7fj8-g5x7-m9v3

Gaining remote control over Govee devices

Priority MEDIUM 48

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the…

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00389 Published 2025-12-18 No fix listed CWE-639
TI-2023-04259 CVE-2023-4617 · GHSA-59pp-rvhc-93rh

Gaining remote control over Govee devices

Priority MEDIUM 50

Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00607 Published 2024-12-19 Fixed in 5.9 CWE-863
TI-2023-22515 CVE-2023-42189 · GHSA-gg6j-gxcg-jjcm

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK…

Priority MEDIUM 41

Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01024 Published 2023-10-10 No fix listed CWE-732
TI-2023-03371 CVE-2023-3612 · GHSA-2pgp-5w4w-9255

Unprotected WebView access in Govee Home App

Priority LOW 39

Govee Home app has unprotected access to WebView component which can be opened by any app on the device.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00513 Published 2023-09-11 Fixed in 5.8.01 CWE-749