Vulnerability-Lookup - Search a vulnerability

Vulnerabilites related to philips - hue_bridge_v2_firmware

Vulnerability from fkie_nvd

Published

2020-01-23 22:15

Modified

2024-11-21 05:34

Severity ?

7.9 (High) - CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Summary

Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.

References

URL	Tags
cve@checkpoint.com	https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/	Exploit, Third Party Advisory
cve@checkpoint.com	https://www2.meethue.com/en-us/support/release-notes/bridge	Product, Release Notes
af854a3a-2127-422b-91ae-364da2661108	https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/	Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108	https://www2.meethue.com/en-us/support/release-notes/bridge	Product, Release Notes

Impacted products

	Vendor	Product	Version
	philips	hue_bridge_v2_firmware	*
	philips	hue_bridge_v2	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:philips:hue_bridge_v2_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E33656C1-57BE-4579-8212-B8AE6E57DF08",
              "versionEndIncluding": "1935144020",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:philips:hue_bridge_v2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "55B37D18-3A59-423E-9D73-F80DFDB14C4D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution."
    },
    {
      "lang": "es",
      "value": "Philips Hue Bridge modelo 2.X versiones anteriores a 1935144020 incluy\u00e9ndola, contiene un desbordamiento de b\u00fafer en la regi\u00f3n heap de la memoria cuando se maneja una cadena ZCL larga durante la fase de comisionamiento, resultando en una ejecuci\u00f3n de c\u00f3digo remota."
    }
  ],
  "id": "CVE-2020-6007",
  "lastModified": "2024-11-21T05:34:58.290",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "HIGH",
          "accessVector": "ADJACENT_NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 4.3,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:A/AC:H/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 3.2,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "HIGH",
          "attackVector": "ADJACENT_NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.9,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.2,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-01-23T22:15:10.277",
  "references": [
    {
      "source": "cve@checkpoint.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/"
    },
    {
      "source": "cve@checkpoint.com",
      "tags": [
        "Product",
        "Release Notes"
      ],
      "url": "https://www2.meethue.com/en-us/support/release-notes/bridge"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "https://research.checkpoint.com/2020/dont-be-silly-its-only-a-lightbulb/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Product",
        "Release Notes"
      ],
      "url": "https://www2.meethue.com/en-us/support/release-notes/bridge"
    }
  ],
  "sourceIdentifier": "cve@checkpoint.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-122"
        }
      ],
      "source": "cve@checkpoint.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2020-6007 (GCVE-0-2020-6007)

Vulnerability from cvelistv5