Description (CNA)
Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Philips Hue Bridge 2.X | affected All versions prior to and including 1935144020 |
CWE
CWE-122
References
- https://www2.meethue.com/en-us/support/release-notes/bridge
- https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/
ADP enrichment
No English description supplied.