NetSight
critical9.8

CVE-2022-47758

Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.

Impact

Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.

Affected products

VendorProductAffected versions
NanoleafNanoleaf Firmware
Version 7.1.1

Weakness classification

References