Logitech Z120 and S120 speakers through 2021-08-09 allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. The power indicator LED of the speakers is connected directly to the power line, as a result, the intensity of a device's power indicator LED is correlative to the power consumption. The sound played by the speakers affects their power consumption and as a result is also correlative to the light intensity of the LEDs. By analyzing measurements obtained from an electro-optical sensor directed at the power indicator LEDs of the speakers, we can recover the sound played by them.
References
Link | Resource |
---|---|
https://www.nassiben.com/glowworm-attack | Exploit Third Party Advisory |
Configurations
History
23 Aug 2021, 17:41
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:logitech:s120_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:logitech:s120:-:*:*:*:*:*:*:* cpe:2.3:h:logitech:z120:-:*:*:*:*:*:*:* cpe:2.3:o:logitech:z120_firmware:*:*:*:*:*:*:*:* |
|
CWE | NVD-CWE-noinfo | |
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 5.9 |
References | (MISC) https://www.nassiben.com/glowworm-attackĀ - Exploit, Third Party Advisory |
11 Aug 2021, 16:18
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-08-11 16:15
Updated : 2023-12-10 13:55
NVD link : CVE-2021-38547
Mitre link : CVE-2021-38547
CVE.ORG link : CVE-2021-38547
JSON object : View
Products Affected
logitech
- s120
- z120
- z120_firmware
- s120_firmware
CWE