Govee Led Strip Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Govee Led Strip Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-42189 — CVSS 7.5 (high): Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee…
• CVE-2023-45956 — CVSS 7.5 (high): An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands.