9 matches found
CVE-2022-31277
Xiaomi Lamp 1 v2.0.40066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request...
EUVD-2022-52844
Malicious code in bioql PyPI...
CVE-2022-31277
Xiaomi Lamp 1 v2.0.40066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request...
CVE-2022-31277
Xiaomi Lamp 1 v2.0.40066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request...
CVE-2022-31277
Xiaomi Lamp 1 v2.0.40066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request...
Cross site request forgery (csrf)
Xiaomi Lamp 1 v2.0.40066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request...
CVE-2022-31277: Authentication Bypass by Capture-replay
Xiaomi Lamp 1 v2.0.40066 was discovered to be vulnerable to replay attacks. This allows attackers to to bypass the expected access restrictions and gain control of the switch and other functions via a crafted POST request...
PT-2022-20660
Name of the Vulnerable Software and Affected Versions Xiaomi Lamp 1 version 2.0.4 0066 Description The issue allows attackers to bypass expected access restrictions and gain control of the switch and other functions via a crafted POST request, specifically through replay attacks. Recommendations...
Xiaomi Lamp 安全漏洞
Xiaomi Lamp is a Xiaomi Smart Desk Lamp from the Chinese company Xiaomi Xiaomi. A security vulnerability exists in Xiaomi Lamp version 1 v2.0.40066, which can be exploited by an attacker to bypass intended access restrictions and gain control of the switch and other features via a crafted POST...