PT-2025-38066 · Signify · Signify Wiz

Ph4Ng0T · Published 2025-09-16 · Updated 2025-10-02 · CVE-2025-56562

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Signify Wiz Connected version 1.9.1

Description An incorrect API in Signify Wiz Connected allows attackers to remotely launch a Denial of Service (DoS) on Wiz devices. Exploitation requires only the MAC address of the target device. The API endpoint is not specified.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-56562

Affected Products

Signify Wiz

References · 10

• 🔥 https://archive.org/details/wiz-rtebug · Exploit
• https://osv.dev/vulnerability/CVE-2025-56562 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56562 · Security Note
• https://t.me/cveNotify/137240 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1968121875340374141 · Twitter Post
• https://t.me/CVEtracker/32675 · Telegram Post
• https://api.wiz.world/api/v2/light · Note
• http://signify.com · Note
• http://wiz.com · Note
• https://twitter.com/CVEnew/status/1969291993734885528 · Twitter Post