Skip to main content

Pebble Plus Firmware

1 CVEs product

Monthly

CVE-2021-38546 Aug 11, 16:15 MEDIUM POC This Month

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Creative Pebble Firmware Pebble V3 Firmware Pebble V2 Firmware +1
NVD
CVSS 3.1
5.9
EPSS
1.3%
EPSS 1% CVSS 5.9
MEDIUM POC This Month

CREATIVE Pebble devices through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Information Disclosure Creative Pebble Firmware +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy