Vulnerability in Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb

CVE-2019-18980

What is CVE-2019-18980?

The Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb is vulnerable due to an unprotected API that allows remote users to manipulate the bulb's functionality without any authentication. This API flaw enables unauthorized individuals to turn the bulb on or off, alter its brightness, or change its color simply by having network access to the bulb. With no encryption or security measures in place, this vulnerability poses significant risks to users, emphasizing the need for enhanced security in IoT devices.

References