Glowworm Attack: Remote Recovery of Speech Signals from Winner Desktop Speakers

Glowworm Attack: Remote Recovery of Speech Signals from Winner Desktop Speakers

CVE-2021-38365 · LOW Severity

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack.

Learn more about our Cis Benchmark Audit For Desktop Software.