lightify home vulnerabilities and fixes

Recent CVEs affecting lightify home, with upgrade or downgrade steps. 4 tracked.

Also searched as: lightifyhome.

lightify home has 4 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 4. Most recent: 2017-04-10. Highest priority: CVE-2016-5053 (score 66/100).

• CVE-2016-5054 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.
• CVE-2016-5053 CRITICAL 9.8 UPGRADE OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via
• CVE-2016-5052 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.
• CVE-2016-5051 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Conta

FAQ

How do I fix lightify home vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lightify home being exploited right now?

None of the tracked lightify home CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lightify home CVE should I patch first?

CVE-2016-5053 currently ranks highest (66/100): OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via.

RSS feed for lightify home · ← Back to latest CVEs