PatchTheCVEosram vulnerabilities
Recent CVEs affecting osram products. 9 tracked.
osram has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2017-04-10. Highest priority: CVE-2016-5053 (score 66/100).
- CVE-2016-5059 MEDIUM 6.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by readin
- CVE-2016-5058 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.
- CVE-2016-5057 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.
- CVE-2016-5056 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.
- CVE-2016-5055 MEDIUM 6.1 UPGRADE OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode con
- CVE-2016-5054 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.
- CVE-2016-5053 CRITICAL 9.8 UPGRADE OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via
- CVE-2016-5052 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.
- CVE-2016-5051 HIGH 7.5 UPGRADE OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Conta
FAQ
How do I fix osram vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is osram being exploited right now?
None of the tracked osram CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which osram CVE should I patch first?
CVE-2016-5053 currently ranks highest (66/100): OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via.