描述
Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.
AI分析AI驱动
受影响产品
nanoleafnanoleaf_firmware
7.1.1
参考资料
- http://nanoleaf.comProduct
- https://pwning.tech/cve-2022-47758ExploitTechnical DescriptionThird Party Advisory
- https://pwning.tech/cve-2022-47758/
- http://nanoleaf.comProduct
- https://pwning.tech/cve-2022-47758ExploitTechnical DescriptionThird Party Advisory
- https://pwning.tech/cve-2022-47758/