CVE-2025-56562

An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only requiring the MAC address.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2025-09-16

Last modified

2026-07-05

Weaknesses

CWE-306

Affected products

• Wiz Connected (Signify)

References

• https://api.wiz.world/api/v2/light
• https://archive.org/details/wiz-rtebug