CVE-2016-5059

CVE-2016-5059 involves OSRAM SYLVANIA Osram Lightify Home. The CNVD entry (CNVD-2017-12298) describes it as a vulnerability in versions up to 2016-07-26 where the application fails to implement SSL pinning, enabling a man-in-the-middle attacker to intercept SSL/TLS traffic from the affected syste...

CVE-2016-5053

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000...

CVE-2016-5052

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning...

CVE-2016-5058

CVE-2016-5058 references OSRAM SYLVANIA Osram Lightify Pro/Lightify Home. Connected CNVD data reveals a MITM vulnerability in Lightify Home due to the program’s failure to use SSL pinning, affecting versions 2016-07-26 and earlier. An attacker could intercept SSL/TLS traffic and capture encrypted...

CVE-2016-5057

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning...

CVE-2016-5051

OSRAM SYLVANIA Osram Lightify Home vulnerability (pre-2016-07-26). The issue stems from the product not using SSL pinning, enabling a Man-in-the-Middle to intercept TLS-encrypted traffic. Affected versions are 2016-07-26 and earlier. The CNVD entry states this vulnerability allows an attacker to ...

CVE-2016-5057

The CVE-2016-5057 issue affects OSRAM SYLVANIA Osram Lightify Pro, caused by the product not using SSL pinning. This enables potential MITM scenarios where an attacker could intercept SSL traffic. Public details in connected CNVD/EUVD entries indicate versions up to 2016-07-26 are affected. No of...

CVE-2016-5052

OSRAM SYLVANIA Osram Lightify Home is affected by CVE-2016-5052. The issue stems from the product’s failure to use SSL pinning in versions up to 2016-07-26, allowing a potential attacker to perform a man-in-the-middle (MITM) attack and intercept SSL/TLS traffic. The CNVD entry confirms the vulner...

CVE-2016-5051

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application...

CVE-2016-5056

CVE-2016-5056 affects OSRAM SYLVANIA Osram Lightify Pro devices with a PSK limited to 8 hex digits (firmware prior to 2016-07-26). Connected data also references OSRAM Lightify Home vulnerabilities (e.g., MITM risk due to lack of SSL pinning) in related ENISA/CNVD entries, but the Lightify Pro PS...

CVE-2016-5055

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page...

CVE-2016-5054: Improper Access Control

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay...

PT-2017-8676

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26 Description The issue allows Zigbee replay. Recommendations For OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26, update to a version released after 2016-07-26 to...

PT-2017-8681

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Pro versions prior to 2016-07-26 Description The issue allows attackers to obtain sensitive information by reading screenshots under the /private/var/mobile/Containers/Data/Application directory. Recommendations F...

CVE-2016-5059: Exposure of Sensitive Information to an Unauthorized Actor

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application...

PT-2017-8680

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Pro versions prior to 2016-07-26 Description The issue allows Zigbee replay. Recommendations For OSRAM SYLVANIA Osram Lightify Pro versions prior to 2016-07-26, update to a version released after 2016-07-26 to...

CVE-2016-5053: Missing Authentication for Critical Function

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000...

PT-2017-8673

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26 Description The issue concerns the storage of a Pre-Shared Key PSK in cleartext. Specifically, it is stored under the /private/var/mobile/Containers/Data/Application path. This...

CVE-2016-5055: Improper Neutralization of Input During Web Page Generation

OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page...

PT-2017-8679

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Pro versions prior to 2016-07-26 Description The issue concerns the lack of SSL pinning in the OSRAM SYLVANIA Osram Lightify Pro. This could potentially allow for man-in-the-middle attacks. Recommendations For OSR...