4 matches found
CVE-2016-5054
CVE-2016-5054 affects OSRAM SYLVANIA Osram Lightify Home (through 2016-07-26) with a Zigbee replay vulnerability. Connected CNVD-2017-12298 provides a concrete root cause: users’ Lightify Home lacked SSL pinning, enabling a man-in-the-middle attack to obtain SSL-encrypted traffic. The CVE entry i...
CVE-2016-5053
CVE-2016-5053 affects OSRAM SYLVANIA Osram Lightify Home. CNVD details indicate a vulnerability in versions released by 2016-07-26 due to the program's failure to use SSL pinning, enabling a man-in-the-middle attack to obtain SSL-encrypted traffic. No remediation or exploit specifics are provided...
CVE-2016-5051
OSRAM SYLVANIA Osram Lightify Home vulnerability (pre-2016-07-26). The issue stems from the product not using SSL pinning, enabling a Man-in-the-Middle to intercept TLS-encrypted traffic. Affected versions are 2016-07-26 and earlier. The CNVD entry states this vulnerability allows an attacker to ...
CVE-2016-5052
OSRAM SYLVANIA Osram Lightify Home is affected by CVE-2016-5052. The issue stems from the product’s failure to use SSL pinning in versions up to 2016-07-26, allowing a potential attacker to perform a man-in-the-middle (MITM) attack and intercept SSL/TLS traffic. The CNVD entry confirms the vulner...