CVE-2021-38544

Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...

CVE-2021-38544

The CVE-2021-38544 entry concerns Sony SRS-XB33 and SRS-XB43 speakers. Reported as a Glowworm/firefly-style attack, remote attackers can recover spoken audio by analyzing LED power indicator emissions with an electro-optical sensor; the LED is tied to the power line so LED brightness correlates w...