CVE-2019-13991

Medium

6.5/10

Summary

Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity.

Attack Complexity: LOW
Attack Vector: ADJACENT_NETWORK
Integrity Impact: HIGH
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: NONE

References

Advisory Timeline

Published Jul 19, 2019

CVE-2019-13991

Summary

References

Advisory Timeline

ChainJacking

JetBrains IDE

KICS SaaS