CVE-2018-15476

CVE-2018-15476 affects myStrom WiFi Switch family (V1 before 2.66, V2 before 3.80, EU before 3.80; related WiFi Bulb/LED Strip/Button versions). Root cause: the SSL/TLS server certificate used in device-to-cloud communication is not verified, enabling MITM attackers on the device network path to ...

CVE-2018-15480

CVE-2018-15480 affects multiple myStrom devices (WiFi Switch V1 <2.66, V2 <3.80, EU <3.80, Bulb <2.58, LED Strip <3.80, Button <2.73, Button Plus

CVE-2018-15478

CVE-2018-15478 affects myStrom WiFi Switch and related devices (V1 < 2.66, V2 < 3.80, EU < 3.80, Bulb < 2.58, LED Strip < 3.80, Button < 2.73, Button Plus

CVE-2018-15476: Improper Certificate Validation

An issue was discovered in myStrom WiFi Switch V1 before 2.66, WiFi Switch V2 before 3.80, WiFi Switch EU before 3.80, WiFi Bulb before 2.58, WiFi LED Strip before 3.80, WiFi Button before 2.73, and WiFi Button Plus before 2.73. The SSL/TLS server certificate in the device to cloud communication...