Philips Vulnerabilities and Affected Products
Vulnerabilities associated with Hue Bridge.
Products
Clear product- e-Alert Unit (non-medical device)9 vulnerabilities
- Philips IntelliSpace Portal9 vulnerabilities
- Hue Bridge8 vulnerabilities
- Vue PACS8 vulnerabilities
- Patient Information Center iX (PICiX)7 vulnerabilities
- Vue Motion7 vulnerabilities
- Vue MyVue7 vulnerabilities
- Vue Speech7 vulnerabilities
- Clinical Collaboration Platform5 vulnerabilities
- Brilliance CT Scanners3 vulnerabilities
- IntelliSpace Portal3 vulnerabilities
- MRI 1.5T3 vulnerabilities
- MRI 3T3 vulnerabilities
- Patient Information Center iX (PIC iX)3 vulnerabilities
- PerformanceBridge Focal Point3 vulnerabilities
- SureSigns VS43 vulnerabilities
- DoseWise Portal2 vulnerabilities
- IntelliBridge EC 40 Hub2 vulnerabilities
- IntelliBridge EC 80 Hub2 vulnerabilities
- Intellispace Cardiovascular (ISCV)2 vulnerabilities
- IntelliSpace Cardiovascular (ISCV) products2 vulnerabilities
- IntelliVue MX40 Patient Worn Monitor2 vulnerabilities
- IntelliVue patient monitors2 vulnerabilities
- PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs2 vulnerabilities
- Philips Alice 6 System2 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2026-3562HIGH | Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass VulnerabilityPhilips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ed25519_sign_open function. The issue results from improper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the … CWE-347Mar 13, 2026 | CVSS8.8v3.1 | EPSS0.29% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3561HIGH | Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution VulnerabilityPhilips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the handling of PUT requests to the characteristics endpoint. The issue results from the lack of proper validat… CWE-122Mar 13, 2026 | CVSS8.0v3.0 | EPSS0.495% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3560HIGH | Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution VulnerabilityPhilips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hk_hap_pair_storage_put function of the HomeKit implementation, which listens on TCP port 8080 by default. The issue results from the lack of proper validatio… CWE-122Mar 13, 2026 | CVSS8.8v3.0 | EPSS0.485% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3559HIGH | Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass VulnerabilityPhilips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the SRP authentication mechanism in the HomeKit Accessory Protocol service, which listens on TCP port 8080 by default. The issue results from the use of a static… CWE-323Mar 13, 2026 | CVSS8.1v3.0 | EPSS0.396% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3558HIGH | Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass VulnerabilityPhilips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the HomeKit Accessory Protocol service, which listens on TCP port 8080 by default. The issue results from the lack of authentication prior to allowing … CWE-306Mar 13, 2026 | CVSS8.1v3.0 | EPSS0.4% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3557HIGH | Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution VulnerabilityPhilips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the hap_pair_verify_handler function of the hk_hap service, which listens on TCP port 8080 by … CWE-122Mar 13, 2026 | CVSS8.0v3.0 | EPSS0.495% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3556HIGH | Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution VulnerabilityPhilips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the hk_hap_pair_storage_put function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based… CWE-122Mar 13, 2026 | CVSS8.8v3.0 | EPSS0.514% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2026-3555HIGH | Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution VulnerabilityPhilips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. User interaction is required to exploit this vulnerability in that the user must initiate the device pairing process. The specific flaw exists within the handling of custom Zigbee ZCL frames in the Model Info download functionality. The issue results f… CWE-122Mar 13, 2026 | CVSS8.0v3.0 | EPSS0.355% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |