CVE-2016-5057

CVE-2016-5057 describes a vulnerability in OSRAM SYLVANIA Osram Lightify Pro devices, specifically versions through 2016-07-26, due to the absence of SSL pinning. This allows for man-in-the-middle attacks, enabling an attacker to intercept and potentially alter communications, leading to a high impact on integrity. With a CVSS v3 score of 7.5 (High), it is easily exploitable over the network with low attack complexity, though it does not impact confidentiality or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.