7 matches found
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...
Code injection
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...
CVE-2021-38544
The CVE-2021-38544 entry concerns Sony SRS-XB33 and SRS-XB43 speakers. Reported as a Glowworm/firefly-style attack, remote attackers can recover spoken audio by analyzing LED power indicator emissions with an electro-optical sensor; the LED is tied to the power line so LED brightness correlates w...
CVE-2021-38544
Sony SRS-XB33 and SRS-XB43 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, t...
Sony SRS-XB33 安全漏洞
SONY Sony SRS-XB33 is a smart speaker from Sony Japan. A security vulnerability exists in the Sony SRS-XB33 and SRS-XB43, which arises from a problem with the device powering the audio output device under certain usage scenarios. The vulnerability can be exploited by an attacker to recover voice...