PT-2025-38066 · Signify · Signify Wiz

Ph4Ng0T · Publicado 2025-09-16 · Atualizado 2025-10-02 · CVE-2025-56562

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Signify Wiz Connected version 1.9.1

Description An incorrect API in Signify Wiz Connected allows attackers to remotely launch a Denial of Service (DoS) on Wiz devices. Exploitation requires only the MAC address of the target device. The API endpoint is not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2025-56562

Produtos afetados

Signify Wiz

Referências · 10

• 🔥 https://archive.org/details/wiz-rtebug · Exploit
• https://t.me/cveNotify/137240 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-56562 · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1968121875340374141 · Publicação no Twitter
• https://t.me/CVEtracker/32675 · Publicação no Telegram
• https://api.wiz.world/api/v2/light · Nota
• http://signify.com · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-56562 · Nota de Segurança
• http://wiz.com · Nota
• https://twitter.com/CVEnew/status/1969291993734885528 · Publicação no Twitter