CVE:CVE-2021-38546
CNNVD:CNNVD-202108-1092
Pebble是美国Pebble公司的一款可定制手表。
Pebble 存在安全漏洞，该漏洞源于设备在某些特定的使用情况下，该设备为音频输出设备供电时会出现问题。攻击者可利用该漏洞通过望远镜和光电传感器从设备上的LED恢复语音信号，即“萤火虫”攻击。
solution:Upgrade creative pebble_v3_firmware to a higher version than 2021-08-09,and avoid the version (,2021-08-09]; Upgrade creative pebble_v2_firmware to a higher version than 2021-08-09,and avoid the version (,2021-08-09]; Upgrade creative pebble_firmware to a higher version than 2021-08-09,and avoid the version (,2021-08-09]; Upgrade creative pebble_plus_firmware to a higher version than 2021-08-09,and avoid the version (,2021-08-09]