Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Raspberry Pi 3 B+ and 4 B devices through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We assume that the Raspberry Pi supplies power to some speakers. The power indicator LED of the Raspberry Pi is connected directly to the power line, as a result, the intensity of a device's power indicator LED is correlative to the power consumption. The sound played by the speakers affects the Raspberry Pi's power consumption and as a result is also correlative to the light intensity of the LED. By analyzing measurements obtained from an electro-optical sensor directed at the power indicator LED of the Raspberry Pi, we can recover the sound played by the speakers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Raspberry Pi 3 module B+ 安全漏洞
Vulnerability Description
Raspberry Pi 3 module B+是一款嵌入式系统开发板。 Raspberry Pi 3 module B+ 和 4 B 存在安全漏洞，该漏洞源于设备在某些特定的使用情况下，该设备为音频输出设备供电时会出现问题。攻击者可利用该漏洞通过望远镜和光电传感器从设备上的LED恢复语音信号，即“萤火虫”攻击。
CVSS Information
N/A
Vulnerability Type
N/A