Approved changes feed: RSS · Atom

cpe:2.3:a:trendmakers:sight_bulb_pro_firmware_zj_cg32-2201:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTrendmakers (0acf3a34-00e8-509f-8a6a-b697cf3ad383)
ProductSight Bulb Pro Firmware Zj Cg32 2201 (f72894ed-e4c1-52f8-b5c4-2b2c895cd358)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-6522 vulnerable 2026-06-08 07:43:15.214533 TrendMakers Sight Bulb Pro Command Injection
MEDIUM (5.4)
Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string.
Published: 2025-06-27T17:09:33.801Z
Updated: 2025-06-27T18:33:29.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6521 vulnerable 2026-06-08 07:43:15.214026 TrendMakers Sight Bulb Pro Use of a Broken or Risky Cryptographic Algorithm
HIGH (7.6)
During the initial setup of the device the user connects to an access point broadcast by the Sight Bulb Pro. During the negotiation, AES Encryption keys are passed in cleartext. If captured, an attacker may be able to decrypt communications between the management app and the Sight Bulb Pro which may include sensitive information such as network credentials.
Published: 2025-06-27T17:06:55.087Z
Updated: 2025-06-27T17:29:48.416Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.