Cleartext Storage of Sensitive Information Vulnerability in Philips Lighting Devices
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Philips Lighting (Signify Innovations India) | Philips Smart Wi-Fi LED Batten 24-Watt | unaffected |
|
||||||
| Philips Lighting (Signify Innovations India) | Philips Smart Wi-Fi LED T Beamer 20-Watt | unaffected |
|
||||||
| Philips Lighting (Signify Innovations India) | Philips Smart Bulb 9,10,12-Watt | unaffected |
|
||||||
| Philips Lighting (Signify Innovations India) | Philips Smart T-Bulb 10,12-Watt | unaffected |
|
No data.
No data.
No data available yet.
Vendor Solution
Upgrade Philips Smart Wi-Fi LED Batten 24-Watt, LED T Beamer 20-Watt, Smart Bulb 9,10,12-Watt and Smart T-Bulb 10,12-Watt to version 1.33.1
| Source | ID | Title |
|---|---|---|
EUVD |
EUVD-2024-50270 | This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext Wi-Fi credentials stored on the vulnerable device. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the Wi-Fi network to which vulnerable device is connected. |
No CVSS v3.1
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.155% probability within 30 days)
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
epss
|
epss
|
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Signify Innovations India
Signify Innovations India phillips Smart Bulb 10-watt Firmware Signify Innovations India phillips Smart Bulb 12-watt Firmware Signify Innovations India phillips Smart Bulb 9-watt Firmware Signify Innovations India phillips Smart T-bulb 10-watt Firmware Signify Innovations India phillips Smart T-bulb 12-watt Firmware Signify Innovations India phillips Smart Wi-fi Led Batten 24-watt Firmware Signify Innovations India phillips Smart Wi-fi Led T Beamer 20-watt Firmware |
|
| CPEs | cpe:2.3:o:signify_innovations_india:phillips_smart_bulb_10-watt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:signify_innovations_india:phillips_smart_bulb_12-watt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:signify_innovations_india:phillips_smart_bulb_9-watt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:signify_innovations_india:phillips_smart_t-bulb_10-watt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:signify_innovations_india:phillips_smart_t-bulb_12-watt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:signify_innovations_india:phillips_smart_wi-fi_led_batten_24-watt_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:signify_innovations_india:phillips_smart_wi-fi_led_t_beamer_20-watt_firmware:*:*:*:*:*:*:*:* |
|
| Vendors & Products |
Signify Innovations India
Signify Innovations India phillips Smart Bulb 10-watt Firmware Signify Innovations India phillips Smart Bulb 12-watt Firmware Signify Innovations India phillips Smart Bulb 9-watt Firmware Signify Innovations India phillips Smart T-bulb 10-watt Firmware Signify Innovations India phillips Smart T-bulb 12-watt Firmware Signify Innovations India phillips Smart Wi-fi Led Batten 24-watt Firmware Signify Innovations India phillips Smart Wi-fi Led T Beamer 20-watt Firmware |
|
| Metrics |
ssvc
|
| Type | Values Removed | Values Added |
|---|---|---|
| Description | This vulnerability exists in Philips lighting devices due to storage of Wi-Fi credentials in plain text within the device firmware. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext Wi-Fi credentials stored on the vulnerable device. Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to the Wi-Fi network to which vulnerable device is connected. | |
| Title | Cleartext Storage of Sensitive Information Vulnerability in Philips Lighting Devices | |
| Weaknesses | CWE-312 | |
| References |
| |
| Metrics |
cvssV4_0
|