Approved changes feed: RSS · Atom

cpe:2.3:o:govee:led_strip_firmware:3.00.42:*:*:*:*:*:*:*

part: o version: 3.00.42 update: *

VendorGovee (def27823-f4f0-58f4-ae60-af5a8f0ff29a)
ProductLed Strip Firmware (ba394206-8b3f-5be3-82d4-b3df6eb2c86e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-45956 vulnerable 2026-06-08 06:12:43.652347 Details available
An issue discovered in Govee LED Strip v3.00.42 allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands.
Published: 2023-10-30T00:00:00.000Z
Updated: 2024-09-09T20:06:29.952Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-42189 vulnerable 2026-06-08 06:11:07.926252 Details available
Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function.
Published: 2023-10-10T00:00:00.000Z
Updated: 2024-11-26T21:34:19.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.