All packages
Osram Lightify Home vulnerabilities
4 known CVE vulnerabilities in Osram Lightify Home, translated and rated.
- CVE-2016-5054High
Osram Lightify Home through July 26, 2016, allows Zigbee replay, which may lead to unauthorized access to the system.
- CVE-2016-5052High
Osram Lightify Home through July 26, 2016, does not use SSL pinning, which may lead to man-in-the-middle attacks.
- CVE-2016-5051High
Osram Lightify Home before July 26, 2016, stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.
- CVE-2016-5053Critical
Osram Lightify Home before July 26, 2016, allows remote attackers to execute arbitrary commands via TCP port 4000.