High severity7.5NVD Advisory· Published Oct 10, 2023· Updated Jun 17, 2026
CVE-2023-42189
CVE-2023-42189
Description
Insecure Permissions vulnerability in Connectivity Standards Alliance Matter Official SDK v.1.1.0.0 , Nanoleaf Light strip v.3.5.10, Govee LED Strip v.3.00.42, switchBot Hub2 v.1.0-0.8, Phillips hue hub v.1.59.1959097030, and yeelight smart lamp v.1.12.69 allows a remote attacker to cause a denial of service via a crafted script to the KeySetRemove function.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
17- Connectivity Standards Alliance/Matter Official SDKdescription
- cpe:2.3:o:tapo:mini_smart_wi-fi_plug_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:nanoleaf:lightstrip_firmware:3.5.10:*:*:*:*:*:*:*
- cpe:2.3:o:govee:led_strip_firmware:3.00.42:*:*:*:*:*:*:*
- cpe:2.3:o:switchbot:hub2_firmware:1.0-0.8:*:*:*:*:*:*:*
- cpe:2.3:o:phillips:hue_bridge_firmware:1.59.1959097030:*:*:*:*:*:*:*
- cpe:2.3:o:yeelight:smart_lamp_firmware:1.12.69:*:*:*:*:*:*:*
- cpe:2.3:o:tp-link:smart_plug_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:orein:smart_bulb_firmware:-:*:*:*:*:*:*:*
- cpe:2.3:o:eve:eve_door_and_window_firmware:-:*:*:*:*:*:*:*
- Range: 1.1.0.0
- Range: 1.12.69
Patches
Vulnerability mechanics
References
3- github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Remove%20Key%20Set%20Vulnerability%20Report.pdfnvdThird Party Advisory
- github.com/project-chip/connectedhomeip/issues/28518nvdIssue TrackingThird Party Advisory
- github.com/project-chip/connectedhomeip/issues/28679nvdIssue TrackingThird Party Advisory
News mentions
0No linked articles in our index yet.