CVE-2017-18642

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-02-10 · updated 2026-06-17
Weakness: CWE-200

Description

Syska Smart Bulb devices through 2017-08-06 receive RGB parameters over cleartext Bluetooth Low Energy (BLE), leading to sniffing, reverse engineering, and replay attacks.

Affected products

Syska Smartlight Rainbow Led Smart Bulb Firmware: through 2017-08-06

References

https://iayanpahwa.github.io/Reverse-Engineering-IoT-Devices/
https://iayanpahwa.github.io/Reverse-Engineering-IoT-Devices/

Get alerted when CVE-2017-18642 or the next vulnerability affects your stack