VYPR

Go 2 Firmware

by JBL

CVEs (1)

  • CVE-2021-38548MedAug 11, 2021
    risk 0.38cvss 5.9epss 0.01

    JBL Go 2 devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result,…