Govee Home vulnerabilities
2 known vulnerabilities in Govee Home from Govee. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
1critical
1high
0exploited
9.4average CVSS score
Latest first
- 10.0 Critical severity
Govee Home: Incorrect Authorization
Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values. This issue affects Govee Home applicat
- 8.8 High severity
Govee Home: Exposed Dangerous Method or Function
Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the attacker can execute JavaScript in context of WebView or steal sensitive user data by displaying phishin