High severity7.5NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026
CVE-2023-42189
CVE-2023-42189
Description
Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8- Connectivity Standards Alliance/Matter Official SDKdescription
- Range: 1.12.69
- Range: 1.1.0.0
Patches
Vulnerability mechanics
References
3- github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Remove%20Key%20Set%20Vulnerability%20Report.pdfnvdThird Party Advisory
- github.com/project-chip/connectedhomeip/issues/28518nvdIssue TrackingThird Party Advisory
- github.com/project-chip/connectedhomeip/issues/28679nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.