CVE-2020-11922

An issue was discovered in WiZ Colors A60 1.14.0. The device sends unnecessary information to the cloud controller server. Although this information is sent encrypted and has low risk in isolation, it decreases the privacy of the end user. The information sent includes the local IP address being used and the SSID of the Wi-Fi network the device is connected to. (Various resources such as wigle.net can be use for mapping of SSIDs to physical locations.)

• CWE-200

• http://seclists.org/fulldisclosure/2024/Jul/14
• https://cwe.mitre.org/data/definitions/201.htmlThird Party Advisory
• https://www.eurofins-cybersecurity.com/news/connected-devices-wiz-smart-lightbulbs/Exploit, Third Party Advisory
• http://seclists.org/fulldisclosure/2024/Jul/14
• https://cwe.mitre.org/data/definitions/201.htmlThird Party Advisory
• https://www.eurofins-cybersecurity.com/news/connected-devices-wiz-smart-lightbulbs/Exploit, Third Party Advisory

Published

Apr 2, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-11917An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…4.3
• CVE-2020-11918An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…5.4
• CVE-2020-11919An issue was discovered in Siime Eye 14.1.00000001.3.330.0.0…8
• CVE-2020-1192A remote code execution vulnerability exists in Visual Studi…7.8
• CVE-2020-11920An issue was discovered in Svakom Siime Eye 14.1.00000001.3.…9.8
• CVE-2020-11921An issue was discovered in Lush 2 through 2020-02-25. Due to…8.8
• CVE-2020-11923An issue was discovered in WiZ Colors A60 1.14.0. API creden…5.5
• CVE-2020-11924An issue was discovered in WiZ Colors A60 1.14.0. Wi-Fi cred…5.5
• CVE-2020-11925An issue was discovered in Luvion Grand Elite 3 Connect thro…8.8
• CVE-2020-11926An issue was discovered in Luvion Grand Elite 3 Connect thro…7.5
• CVE-2020-11928In the media-library-assistant plugin before 2.82 for WordPr…9.8
• CVE-2020-1193<p>A remote code execution vulnerability exists in Microsoft…7.8