CVE-2020-11924

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

CVE-2020-11923

An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged...

CVE-2020-11924

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

Design/Logic Flaw

An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged...

Information disclosure

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

CVE-2020-11924

The CVE-2020-11924 entry affects WiZ Colors A60 (firmware 1.14.0). The root cause is that Wi‑Fi credentials are stored in cleartext in flash memory, creating an information‑disclosure risk if the device is discarded or resold. No exploitation details are provided in the documents. Remediation is ...

CVE-2020-11924

An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi credentials are stored in cleartext in flash memory, which presents an information-disclosure risk for a discarded or resold device...

CVE-2020-11923

Product/Version affected: WiZ Colors A60 1.14.0. Vulnerability: API credentials are logged locally, which can expose sensitive information. Root cause (as stated): Credentials end up in local logs. Impact (as stated): Potential exposure of API credentials due to local logging (no details on explo...

CVE-2020-11923

An issue was discovered in WiZ Colors A60 1.14.0. API credentials are locally logged...

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

Design/Logic Flaw

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being...

CVE-2020-11922

CVE-2020-11922 affects WiZ Colors A60 (1.14.0). The vulnerability is an information disclosure where the device sends unnecessary data to the cloud controller server, including the local IP address and the SSID of the connected Wi‑Fi network. The data is encrypted, and the impact is privacy-relat...

PT-2021-9430 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where Wi-Fi credentials are stored in cleartext in flash memory. This presents an information-disclosure risk for a discarded or resold device. Recommendations: For WiZ Colors...

PT-2021-9428 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where the device sends unnecessary information to the cloud controller server, including the local IP address and the SSID of the Wi-Fi network it is connected to. Although th...

PT-2021-9429 · Unknown · Wiz Colors A60

Name of the Vulnerable Software and Affected Versions: WiZ Colors A60 version 1.14.0 Description: An issue was discovered where API credentials are locally logged, potentially exposing sensitive information. Recommendations: For WiZ Colors A60 version 1.14.0, consider restricting access to the...

WiZ Connected WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from China-based WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0 that stems from API credentials being logged locally...

WiZ Colors A60 安全漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from the Chinese company WiZ Connected. A security vulnerability exists in WiZ Colors A60 1.14.0, which stems from Wi-Fi credentials being stored in plaintext in flash memory...

WiZ Connected WiZ Colors A60 信息泄露漏洞

WiZ Connected WiZ Colors A60 is a smart LED light from the Chinese company WiZ Connected. An information disclosure vulnerability exists in WiZ Colors A60 version 1.14.0, which stems from the device sending unnecessary information to the cloud controller server. No details of the vulnerability ar...