Back to Database
Status published
Medium
CVE-2019-13991
Embedded systems based on Arduino before Rev3 allow remote attackers...
Vulnerability Description
Embedded systems based on Arduino before Rev3 allow remote attackers to send data to LEDs (directly connected to GPIO pins) via a laser, because of LED photosensitivity.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-13991
Credits & Attribution
No credits recorded in the NVD database.
References
More from arduino
View All →CVE-2025-69209
ArduinoCore-avr has Stack-Based Buffer Overflow in WString Float/Double Constructors
Medium
6.9
CVE-2025-64724
Arduino IDE for macOS has Insecure File Permissions
Medium
4.8
CVE-2025-64723
Arduino IDE for macOS has TCC Bypass via Dynamic Library Injection
Medium
4.8
CVE-2025-27608
Self Cross-Site Scripting in Arduino IDE
Low
1
CVE-2023-49296
Arduino Create Agent vulnerable to Reflected Cross-Site Scripting
Medium
6.3
Affected Vendor
arduino
View all reports →Affected Software
arduino firmware
Vulnerable Versions:
0
Timeline
Official Publish:
July 19th, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.