PT-2023-29773 · Govee · Govee Led Strip

Published 2023-10-30 · Updated 2024-09-09 · CVE-2023-45956

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Govee LED Strip version 3.00.42

Description An issue in Govee LED Strip allows attackers to cause a denial of service via crafted Move and MoveWithOnoff commands.

Recommendations For Govee LED Strip version 3.00.42, consider disabling the Move and MoveWithOnoff commands as a temporary workaround until a patch is available.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-45956

Affected Products

Govee Led Strip

References · 4

• https://osv.dev/vulnerability/CVE-2023-45956 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-45956 · Security Note
• https://t.me/cibsecurity/73195 · Telegram Post
• https://github.com/IoT-Fuzz/IoT-Fuzz/blob/main/Govee%20LED%20Strip%20Vulnerability%20Report.pdf · Note