Govee Home
Approved changes feed: RSS · Atom
cpe:2.3:a:govee:govee_home:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Govee (def27823-f4f0-58f4-ae60-af5a8f0ff29a) |
|---|---|
| Product | Govee Home (ba56edf9-2f1b-53af-be32-3db689820e65) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4617 |
vulnerable | 2026-06-08 06:16:13.821113 |
Gaining remote control over Govee devices
CRITICAL (10)
Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values.
This issue affects Govee Home applications on Android and iOS in versions before 5.9.
Published: 2024-12-19T09:39:31.393Z
Updated: 2024-12-20T17:56:46.028Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-3612 |
vulnerable | 2026-06-08 06:09:40.012482 |
Unprotected WebView access in Govee Home App
HIGH (8.2)
Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content.
Published: 2023-09-11T09:04:09.924Z
Updated: 2024-09-26T14:32:25.277Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.