CVE-2016-5052

CVE-2016-5052 describes a vulnerability in OSRAM SYLVANIA Osram Lightify Home through 2016-07-26, where the application fails to implement SSL pinning. This omission allows for man-in-the-middle attacks, enabling an attacker to intercept and potentially alter communications, leading to a high-impact integrity compromise (CVSS 7.5 HIGH). While the vulnerability is easily exploitable over the network with low complexity, there is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding it.