Sengled Smart LED Bulb

From Wiki-IoT
Revision as of 10:50, 24 October 2026 by Huhongye (talk | contribs) (Created page with "==Device Overview== * Manufacturer: Sengled * Model Number: E11-G13 * Firmware Versions affected: V0.0.9 and earlier * Use-case: Zigbee connected smart light, dimming, color a...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

Device Overview

  • Manufacturer: Sengled
  • Model Number: E11-G13
  • Firmware Versions affected: V0.0.9 and earlier
  • Use-case: Zigbee connected smart light, dimming, color adjustment via hub.

Vulnerabilities & Attack Surface

  • CVE ID: CVE-2023-29779
  • Vulnerability description: Zigbee stack improper input validation. Malformed Zigbee packets trigger DoS.
  • Attack vector: Zigbee radio adjacent.

CIA Triad Impact Analysis

  • Confidentiality: Light state and pairing information may be captured.
  • Integrity: Light brightness/color can be modified without authorization.
  • Availability: Flood packets make bulb offline until power cycle.

Mitigations / Countermeasures

  • 1. Apply firmware update through Zigbee hub.
  • 2. Use Zigbee network encryption.
  • 3. Reduce Zigbee radio exposure range.
  • 4. Use trusted hub only.

References

[1] https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29779 [2] Sengled security advisory

Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=Sengled_Smart_LED_Bulb&oldid=9614"