CVE-2019-18980

creationtimestamp| type| source ---|---|--- 2024-02-20 14:51:30+00:00| seen| https://t.me/ctinow/188544...

CVE-2019-18980

The CVE describes an authentication-less control API on Signify Philips Taolight Smart Wi‑Fi Wiz Connected LED Bulb 9290022656. A remote attacker with network access can operate the bulb: turn it on/off, adjust color, or change brightness, due to no authentication or encryption on the control API...