CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

OSRAM SYLVANIA Osram Lightify Pro is an open IoT platform for automated control of lighting devices from OSRAM Germany. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Pro 2016-07-26 and prior versions. An attacker can exploit the vulnerability to obtain and re-execute used...

7.5CVSS6.9AI score0.01397EPSS

Exploits2References1

osv•added 2017/04/10 3:59 a.m.•3 views

CVE-2016-5058

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay...

7.5CVSS5.8AI score0.01397EPSS

Exploits2References1

nvd•added 2017/04/10 3:59 a.m.•13 views

CVE-2016-5058

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay...

7.5CVSS7.6AI score0.01397EPSS

Exploits2References1

osv•added 2017/04/10 3:59 a.m.•3 views

CVE-2016-5059

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application...

6.5CVSS5.8AI score0.01397EPSS

Exploits2References1

osv•added 2017/04/10 3:59 a.m.•4 views

CVE-2016-5056

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK...

7.5CVSS5.8AI score0.01397EPSS

Exploits2References1

osv•added 2017/04/10 3:59 a.m.•3 views

CVE-2016-5057

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning...

7.5CVSS5.8AI score0.01397EPSS

Exploits2References1

nvd•added 2017/04/10 3:59 a.m.•14 views

CVE-2016-5057

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning...

7.5CVSS7.6AI score0.01211EPSS

Exploits1References1

osv•added 2017/04/10 3:59 a.m.•5 views

CVE-2016-5055

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page...

6.1CVSS5.8AI score0.01397EPSS

Exploits2References1

nvd•added 2017/04/10 3:59 a.m.•14 views

CVE-2016-5056

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK...

7.5CVSS7.6AI score0.01397EPSS

Exploits2References1

prion•added 2017/04/10 3:59 a.m.•17 views

Code injection

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page...

4.3CVSS6.3AI score0.01397EPSS

Exploits2References1

prion•added 2017/04/10 3:59 a.m.•12 views

Design/Logic Flaw

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application...

4CVSS6.5AI score0.01397EPSS

Exploits2References1