Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Osram Subscribe
Total 9 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-5055 1 Osram 1 Lightify Pro 2017-04-14 4.3 MEDIUM 6.1 MEDIUM
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page.
CVE-2016-5056 1 Osram 1 Lightify Pro 2017-04-14 5.0 MEDIUM 7.5 HIGH
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.
CVE-2016-5052 1 Osram 1 Lightify Home 2017-04-14 5.0 MEDIUM 7.5 HIGH
OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.
CVE-2016-5058 1 Osram 1 Lightify Pro 2017-04-14 5.0 MEDIUM 7.5 HIGH
OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.
CVE-2016-5057 1 Osram 1 Lightify Pro 2017-04-14 5.0 MEDIUM 7.5 HIGH
OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.
CVE-2016-5059 1 Osram 1 Lightify Pro 2017-04-14 4.0 MEDIUM 6.5 MEDIUM
OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under /private/var/mobile/Containers/Data/Application.
CVE-2016-5054 1 Osram 1 Lightify Home 2017-04-14 5.0 MEDIUM 7.5 HIGH
OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.
CVE-2016-5053 1 Osram 1 Lightify Home 2017-04-14 7.5 HIGH 9.8 CRITICAL
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.
CVE-2016-5051 1 Osram 1 Lightify Home 2017-04-14 5.0 MEDIUM 7.5 HIGH
OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.