Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Led_strip_firmware
(Govee)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2023-10-10 | CVE-2023-42189 | Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function. | Eve_door_and_window_firmware, Led_strip_firmware, Lightstrip_firmware, Smart_bulb_firmware, Hue_bridge_firmware, Hub2_firmware, Mini_smart_wi\-Fi_plug_firmware, Smart_plug_firmware, Smart_lamp_firmware | 7.5 | ||
| 2023-10-30 | CVE-2023-45956 | An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands. | Led_strip_firmware | 7.5 |