Glowworm Attack: Remote Recovery of Speech Signals from Winner Desktop Speakers
CVE-2021-38365 · LOW Severity
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Winner (aka ToneWinner) desktop speakers through 2021-08-09 allow remote attackers to recover speech signals from the power-indicator LED via a telescope and an electro-optical sensor, aka a "Glowworm" attack.
Learn more about our Cis Benchmark Audit For Desktop Software.