CVE-2020-6007CWE-122

Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the…

published January 23, 2020

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02132 · 81.8th percentile
Weakness
CWE-122 · Heap-based Buffer Overflow
Published
2020-01-23T21:20Z
EPSS history
Timeline
  • 23 JAN 21:20Z
    Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the…
    cvelistv5