CVE-2022-47758

CriticalCVSS 9.8

Published: 27/04/2023(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.12%

62th percentile - higher than 62% of all known CVEs

Nanoleaf firmware version 7.1.1 and below lacks TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.

An attacker can take control of the device, steal data, or use it as an entry point into the organization's internal network.

It is recommended to immediately update the Nanoleaf firmware to the latest available version that includes the TLS verification fix.

Original NVD description (English source)

Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.