Hue Bridge V2 Firmware
1 CVEs
product
Monthly
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code. Rated high severity (CVSS 7.9), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.
Buffer Overflow
RCE
Heap Overflow
Hue Bridge V2 Firmware
NVD
CVSS 3.1
7.9
EPSS
2.1%
EPSS 2%
CVSS 7.9
HIGH
POC
This Week
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code. Rated high severity (CVSS 7.9), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.
Buffer Overflow
RCE
Heap Overflow
+1
NVD