Approved changes feed: RSS · Atom

cpe:2.3:a:govee:home:*:*:*:*:*:iphone_os:*:*

part: a version: * update: *

VendorGovee (def27823-f4f0-58f4-ae60-af5a8f0ff29a)
ProductHome (ae850ddf-30bc-5e8d-ab9e-c912e1f7980d)
Edition*
Language*
Software edition*
Target softwareiphone_os
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3612 vulnerable 2026-06-08 06:09:40.013975 Unprotected WebView access in Govee Home App
HIGH (8.2)
Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishing content.
Published: 2023-09-11T09:04:09.924Z
Updated: 2024-09-26T14:32:25.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.