Описание
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication. An unauthenticated attacker with network access to the MQTT service on a vulnerable system can read data and control connected lights. Fixed in 1.77.2071318010.
EPSS
Процентиль: 30%
0.00368
Низкий
7.3 High
CVSS3
Дефекты
CWE-306
Связанные уязвимости
CVSS3: 6.3
github
24 дня назад
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker (v2.0.22) that listens on all network interfaces with anonymous access enabled and no firewall restriction. An attacker with access to the Bridge's network can read device data and control connected lights.
EPSS
Процентиль: 30%
0.00368
Низкий
7.3 High
CVSS3
Дефекты
CWE-306