AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-4617

CRITICAL · CVSS 10 EPSS 0.58%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2024-12-19 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 10.0. It affects Android. It may be remotely exploitable.

CVE
CVE-2023-4617
Severity
CRITICAL
CVSS
10
EPSS
0.58%
Android

Original NVD Description

Incorrect authorization vulnerability in HTTP POST method in Govee Home application on Android and iOS allows remote attacker to control devices owned by other users via changing "device", "sku" and "type" fields' values.  This issue affects Govee Home applications on Android and iOS in versions before 5.9.