EUVD-2016-6005

Malware in sbrugna...

EUVD-2016-6006

Malware in sbrugna...

EUVD-2016-6007

Malware in sbrugna...

EUVD-2016-6004

Malware in sbrugna...

OSRAM SYLVANIA Osram Lightify Home Pre-Authentication Command Execution Vulnerability

OSRAM SYLVANIA Osram Lightify Home is a set of open IoT platforms for automated control of lighting devices from OSRAM Germany. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26. A remote attacker can exploit the vulnerability to execute arbitrary...

OSRAM SYLVANIA Osram Lightify Home Information Disclosure Vulnerability

OSRAM SYLVANIA Osram Lightify Home is an open IoT platform for automated control of lighting devices from German company OSRAM. A security vulnerability exists in OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26, which originates from the program storing the PSK in plaintext in the...

CVE-2016-5052

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning...

CVE-2016-5052

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning...

CVE-2016-5053

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000...

CVE-2016-5052

OSRAM SYLVANIA Osram Lightify Home is affected by CVE-2016-5052. The issue stems from the product’s failure to use SSL pinning in versions up to 2016-07-26, allowing a potential attacker to perform a man-in-the-middle (MITM) attack and intercept SSL/TLS traffic. The CNVD entry confirms the vulner...

CVE-2016-5051

OSRAM SYLVANIA Osram Lightify Home vulnerability (pre-2016-07-26). The issue stems from the product not using SSL pinning, enabling a Man-in-the-Middle to intercept TLS-encrypted traffic. Affected versions are 2016-07-26 and earlier. The CNVD entry states this vulnerability allows an attacker to ...

CVE-2016-5054: Improper Access Control

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay...

CVE-2016-5052: Undefined Security Weakness

OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning...

CVE-2016-5053: Missing Authentication for Critical Function

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000...

CVE-2016-5051: Exposure of Sensitive Information to an Unauthorized Actor

OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application...

PT-2017-8674

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 Description The issue is related to the lack of SSL pinning in the OSRAM SYLVANIA Osram Lightify Home. This means that the device does not properly verify the identity of the server it is...

PT-2017-8675

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26 Description The issue allows remote attackers to execute arbitrary commands. This can be done via TCP port 4000. Recommendations For OSRAM SYLVANIA Osram Lightify Home versions...

PT-2017-8676

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26 Description The issue allows Zigbee replay. Recommendations For OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26, update to a version released after 2016-07-26 to...

PT-2017-8673

Name of the Vulnerable Software and Affected Versions OSRAM SYLVANIA Osram Lightify Home versions prior to 2016-07-26 Description The issue concerns the storage of a Pre-Shared Key PSK in cleartext. Specifically, it is stored under the /private/var/mobile/Containers/Data/Application path. This...