The vulnerability lies in the firmware upload functionality of Nanoleaf Lines 12.3.2, which does not authenticate incoming firmware files. An attacker can remotely upload arbitrary firmware, forcing the device to write data to storage until capacity is exhausted. This leads to a denial of service by exhausting available storage and potentially rendering the device inoperable. The weakness corresponds to CWE-400: Uncontrolled Resource Consumption.

The affected product is Nanoleaf Lines, specifically shipping firmware version 12.3.2 (and any intermediate releases up to 12.3.5). All devices running these firmware versions that allow firmware uploads are vulnerable. The issue is resolved in firmware 12.3.6.

The CVSS score of 6.9 indicates a medium severity vulnerability. No EPSS score is available, and the vulnerability is not listed in CISA's Known Exploited Vulnerabilities catalog. The description confirms that an unauthenticated attacker can remotely exploit the flaw by uploading firmware, which suggests that the attack vector is network-based and requires no local privileges. While the impact is limited to resource exhaustion, repeated exploitation could disrupt the device's normal operation.