← CVE Intelligence

CVE-2025-7202

Cross-Site Request Forgery (CSRF) allowed remote control of Elgato Key Lights PUBLISHED

Description (CNA)

A Cross-Site Request Forgery (CSRF) in Elgato's Key Lights and related light products allows an attacker to host a malicious webpage that remotely controlles the victim's lights.

Affected (CNA)

Vendor / productVersions
Elgato / Key Lightaffected 0 through 1.0.3(218)
Elgato / Key Light Airaffected 0 through 1.0.3.220
Elgato / Key Light Miniaffected 0 through 1.0.4.239
Elgato / Key Light Neoaffected 0 through 1.0.4.206
Elgato / Ring Lightaffected 0 through 1.0.4.149
Elgato / Light Stripaffected 0 through 1.0.4.231
Elgato / Light Strip Proaffected 0 through 1.0.1.145

CWE

CWE-352

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.