lightify pro vulnerabilities and fixes

Recent CVEs affecting lightify pro, with upgrade or downgrade steps. 5 tracked.

Also searched as: lightifypro.

lightify pro has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2017-04-10. Highest priority: CVE-2016-5058 (score 53/100).

• CVE-2016-5059 MEDIUM 6.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by readin
• CVE-2016-5058 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.
• CVE-2016-5057 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.
• CVE-2016-5056 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.
• CVE-2016-5055 MEDIUM 6.1 UPGRADE OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode con

FAQ

How do I fix lightify pro vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is lightify pro being exploited right now?

None of the tracked lightify pro CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which lightify pro CVE should I patch first?

CVE-2016-5058 currently ranks highest (53/100): OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay..

RSS feed for lightify pro · ← Back to latest CVEs