Vulnerability Details CVE-2021-38365
Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.3%
CVSS Severity
CVSS v3 Score 3.7
CVSS v2 Score 4.3
References
Products affected by CVE-2021-38365
-
cpe:2.3:h:tonewinner:winner_desktop_speakers:-
-
cpe:2.3:o:tonewinner:winner_desktop_speakers_firmware:-
-
cpe:2.3:o:tonewinner:winner_desktop_speakers_firmware:2021-08-09