CVE-2017-14797

Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the…

published September 30, 2017

CVSS
—
EPSS
0%
Percentile
35.4
In the wild
Unconfirmed
What it is

Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories) by leveraging the ability to sniff HTTP traffic on the local intranet network.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00422 · 35.4th percentile
Published
2017-09-30T03:00Z
EPSS history
Timeline
  • 30 SEP 03:00Z
    Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the…
    cvelistv5