CVE-2018-7580

 

Published at: - 21-12-2020 10:15

Last modified: - 06-08-2022 05:45

Total changes: - 2

Description

Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The "hub" will stop operating and be frozen until the flood stops. During the flood, the user won't be able to turn on/off the lights, and all of the hub's functionality will be unresponsive. The cloud service also won't work with the hub.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://www.iliashn.com/CVE-2018-7580/
• 20201225 [CVE-2018-7580] - Philips Hue Denial of Service-Exploit, Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/160724/Philips-Hue-Denial-Of-Service.html

 

Keywords

NVD

 

CVE-2018-7580

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures