CVE-2016-5053
CriticalSummary
Osram Lightify Home before July 26, 2016, allows remote attackers to execute arbitrary commands via TCP port 4000.
Risk Assessment
Exploitation of this vulnerability could lead to device takeover, posing a significant threat to home network security.
Recommendation
It is recommended to update the software to the latest version to mitigate this vulnerability.
Other vulnerabilities in Osram Lightify Home
See all- CVE-2016-5054High
Osram Lightify Home through July 26, 2016, allows Zigbee replay, which may lead to unauthorized access to the system.
- CVE-2016-5052High
Osram Lightify Home through July 26, 2016, does not use SSL pinning, which may lead to man-in-the-middle attacks.
- CVE-2016-5051High
Osram Lightify Home before July 26, 2016, stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.
Original NVD description (English source)
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.