Osram Lightify Pro — known CVE vulnerabilities

Every CVE whose affected-product data names Osram Lightify Pro, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2016-5056 — CVSS 7.5 (high): OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 uses only 8 hex digits for a PSK.
• CVE-2016-5057 — CVSS 7.5 (high): OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 does not use SSL pinning.
• CVE-2016-5058 — CVSS 7.5 (high): OSRAM SYLVANIA Osram Lightify Pro through 2016-07-26 allows Zigbee replay.
• CVE-2016-5059 — CVSS 6.5 (medium): OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 allows attackers to obtain sensitive information by reading screenshots under…
• CVE-2016-5055 — CVSS 6.1 (medium): OSRAM SYLVANIA Osram Lightify Pro before 2016-07-26 has XSS in the username field and Wireless Client Mode configuration page.