Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
MIRACASE MHUB500 USB splitters through 2021-08-09, in certain specific use cases in which the device supplies power to audio-output equipment, allow remote attackers to recover speech signals from an LED on the device, via a telescope and an electro-optical sensor, aka a "Glowworm" attack. We assume that the USB splitter supplies power to some speakers. The power indicator LED of the USB splitter is connected directly to the power line, as a result, the intensity of the USB splitter's power indicator LED is correlative to its power consumption. The sound played by the connected speakers affects the USB splitter's power consumption and as a result is also correlative to the light intensity of the LED. By analyzing measurements obtained from an electro-optical sensor directed at the power indicator LED of the USB splitter, we can recover the sound played by the connected speakers.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MIRACASE MHUB500 USB splitters 安全漏洞
Vulnerability Description
MIRACASE MHUB500 USB splitters是一个应用软件。该工具为音频输出设备提供强大功能,让远程攻击者通过示波器和电光从连接设备的 LED 检索代码信号传感器。 MIRACASE MHUB500 USB splitters 2021-08-09及之前版本存在安全漏洞,远程攻击者可通过望远镜和光电传感器(也称为“萤火虫”攻击)从设备上的LED恢复语音信号。假设USB分离器为一些扬声器供电。USB分离器的电源指示灯LED直接连接到电源线,因此,USB分离器的电源指示灯LED的强度与其功耗相
CVSS Information
N/A
Vulnerability Type
N/A