Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function.
References
Link | Resource |
---|---|
https://github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Remove%20Key%20Set%20Vulnerability%20Report.pdf | Third Party Advisory |
https://github.com/project-chip/connectedhomeip/issues/28518 | Issue Tracking Third Party Advisory |
https://github.com/project-chip/connectedhomeip/issues/28679 | Issue Tracking Third Party Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2023-10-10T00:00:00
Updated: 2023-10-10T02:02:40.514901
Reserved: 2023-09-08T00:00:00
Link: CVE-2023-42189
JSON object: View
NVD Information
Status : Analyzed
Published: 2023-10-10T03:15:09.530
Modified: 2024-02-15T19:44:54.227
Link: CVE-2023-42189
JSON object: View
Redhat Information
No data.
CWE