CVE-2016-5057

High

Published: 10/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Osram Lightify Pro through July 26, 2016, does not use SSL pinning, which may lead to man-in-the-middle attacks.

Risk Assessment

The lack of SSL pinning increases the risk of data interception between devices and the server, potentially leading to unauthorized access to the system.

Recommendation

It is recommended to implement SSL pinning to secure communication and protect against man-in-the-middle attacks.

Other vulnerabilities in Osram Lightify Pro

CVE-2016-5056High
Osram Lightify Pro before July 26, 2016, uses only 8 hex digits for a PSK, which may weaken security.

Original NVD description (English source)

OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.