CVE-2021-38365

2021-08-1013:18:48

mitre

www.cve.org

4.7 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a “Glowworm” attack.

References

www.tonewinner.com

www.nassiben.com/glowworm-attack