← Database

CVE-2022-47758

CRITICAL CVSS: 9.8 Published: 2023-04-27 Modified: 2026-07-09

Description

Nanoleaf firmware v7.1.1 and below is missing TLS verification, allowing attackers to execute arbitrary code via a DNS hijacking attack.

Affected Platforms

Nanoleaf Nanoleaf Firmware

Weakness Type

CWE-295, CWE-295

References