PT-2023-15476 · Nanoleaf · Nanoleaf

Name of the Vulnerable Software and Affected Versions: Nanoleaf firmware versions prior to 7.1.1 Description: The issue is related to missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack. This affects IoT smart lights, enabling unauthenticated remote...