971 matches found
CVE-2020-8685
Intel® LED Manager for NUC before version 1.2.3 contains an improper authentication vulnerability that may allow a privileged local user to trigger a denial of service. The Intel advisory Intel‑SA‑00376 confirms affected versions and recommends updating to 1.2.3 or later. CVSSv3.1 base score 4.4 ...
CVE-2020-8685: Improper Authentication
Improper authentication in subsystem for Intel R LED Manager for NUC before version 1.2.3 may allow privileged user to potentially enable denial of service via local access...
PT-2020-4122
Name of the Vulnerable Software and Affected Versions: Intel LED Manager for NUC versions prior to 1.2.3 Description: The issue is related to improper authentication in the Intel LED Manager for NUC subsystem, which may allow a privileged user to potentially enable denial of service via local...
Intel® LED Manager for NUC Advisory
Summary: A potential security vulnerability in the Intel® LED Manager for NUC may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2020-8685 Description: Improper authentication in subsystem for Intel R LED...
led-lichterketten-test.de Cross Site Scripting vulnerability OBB-1245818
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Low-power Bluetooth (BLE) connectivity vulnerability in LED smart bulbs at Foshan Electric Lighting Co.
LED smart light bulb is a new technology light source, which has the advantages of beauty, fashion, energy saving, environmental protection, safety and so on, and it can be controlled by intelligent devices. Foshan Electric Lighting Co., Ltd LED smart bulb there is a low-power Bluetooth BLE...
Applied ThreadFix: Getting the Most Out of Your Training Investment
As we talked about in an earlier blog post, secure coding training for developers can be expensive. Knowledgeable individuals who are adept at training are relatively rare. Quality training materials are expensive to develop and maintain. For these reasons, solid commercial instructor-led trainin...
CVE-2019-18980
On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...
Authentication flaw
On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...
CVE-2019-18980
On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...
CVE-2019-18980
The CVE describes an authentication-less control API on Signify Philips Taolight Smart Wi‑Fi Wiz Connected LED Bulb 9290022656. A remote attacker with network access can operate the bulb: turn it on/off, adjust color, or change brightness, due to no authentication or encryption on the control API...
PT-2019-15737
Name of the Vulnerable Software and Affected Versions Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb version 9290022656 Description The issue allows remote users to control the bulb's operation due to an unprotected API. This enables anyone with network access to the bulb to turn it ...
CVE-2019-18980: Missing Authentication for Critical Function
On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...
led-svet.com.ua Cross Site Scripting vulnerability
Security Researcher geeknik Helped patch 8544 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting led-svet.com.ua website and its users. Following coordinat...
CVE-2019-13991
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...
CVE-2019-13991
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...
CVE-2019-13991: Undefined Security Weakness
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs directly connected to GPIO pins via a laser, because of LED photosensitivity...
Emerson 396897-04-5 Non-isolated Mixed Input/Output module Detection
Binary data 756523.prm...