Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights
A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Key Light
Vendor
Elgato
Product
Key Light
Platforms
Unknown
Default status
unaffected
Key Light · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
1.0.3(218)
None listed
Key Light Air
Vendor
Elgato
Product
Key Light Air
Platforms
Unknown
Default status
unaffected
Key Light Air · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
1.0.3.220
None listed
Key Light Mini
Vendor
Elgato
Product
Key Light Mini
Platforms
Unknown
Default status
unaffected
Key Light Mini · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
1.0.4.239
None listed
Key Light Neo
Vendor
Elgato
Product
Key Light Neo
Platforms
Unknown
Default status
unaffected
Key Light Neo · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
1.0.4.206
None listed
Ring Light
Vendor
Elgato
Product
Ring Light
Platforms
Unknown
Default status
unaffected
Ring Light · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
1.0.4.149
None listed
Light Strip
Vendor
Elgato
Product
Light Strip
Platforms
Unknown
Default status
unaffected
Light Strip · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
0
affected
custom
Unavailable
1.0.4.231
None listed
Light Strip Pro
Vendor
Elgato
Product
Light Strip Pro
Platforms
Unknown
Default status
unaffected
Light Strip Pro · Scoped product and version facts