CVE-2023-45955: High severity nanoleaf firmware vulnerability
Published Oct 31, 2023
·Updated
An issue discovered in Nanoleaf Light strip v3.5.10 allows attackers to cause a denial of service via crafted write binding attribute commands.
Affected Software
2 affected components
All of the following
Nanoleaf Lightstrip Firmware=3.5.10
Nanoleaf Lightstrip
Event History
Oct 31, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-45955?
CVE-2023-45955 is an issue discovered in Nanoleaf Light strip v3.5.10 that allows attackers to cause a denial of service via crafted write binding attribute commands.
2
How severe is CVE-2023-45955?
CVE-2023-45955 has a severity rating of 7.5 (High).
3
What software version is affected by CVE-2023-45955?
The Nanoleaf Light strip firmware version 3.5.10 is affected by CVE-2023-45955.
4
How can an attacker exploit CVE-2023-45955?
An attacker can exploit CVE-2023-45955 by sending crafted write binding attribute commands to the Nanoleaf Light strip v3.5.10.
5
Is Nanoleaf Lightstrip vulnerable to CVE-2023-45955?
No, Nanoleaf Lightstrip is not vulnerable to CVE-2023-45955.