Osram Lightify Home — known CVE vulnerabilities

Every CVE whose affected-product data names Osram Lightify Home, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2016-5053 — CVSS 9.8 (critical): OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 allows remote attackers to execute arbitrary commands via TCP port 4000.
• CVE-2016-5051 — CVSS 7.5 (high): OSRAM SYLVANIA Osram Lightify Home before 2016-07-26 stores a PSK in cleartext under /private/var/mobile/Containers/Data/Application.
• CVE-2016-5052 — CVSS 7.5 (high): OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 does not use SSL pinning.
• CVE-2016-5054 — CVSS 7.5 (high): OSRAM SYLVANIA Osram Lightify Home through 2016-07-26 allows Zigbee replay.