CVE-2017-18642

Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2020-02-10

Last modified

2024-08-05

Weaknesses

CWE-200

Affected products

• Smartlight Rainbow Led Smart Bulb Firmware (Syska)

References

• https://iayanpahwa.github.io/Reverse-Engineering-IoT-Devices/