Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2026/01/09 10:18 a.m.•16 views

CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

7.5CVSS7.3AI score0.00439EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•13 views

EUVD-2019-8640

Malware in sbrugna...

7.5CVSS7.5AI score0.00439EPSS
SaveExploits1References2
NVD
NVD
•added 2019/11/14 10:15 p.m.•27 views

CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

7.5CVSS7.7AI score0.00439EPSS
SaveExploits1References1
Prion
Prion
•added 2019/11/14 10:15 p.m.•27 views

Authentication flaw

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

5CVSS7.7AI score0.00439EPSS
SaveExploits1References1
CVE
CVE
•added 2019/11/14 9:03 p.m.•91 views

CVE-2019-18980

The CVE describes an authentication-less control API on Signify Philips Taolight Smart Wi‑Fi Wiz Connected LED Bulb 9290022656. A remote attacker with network access can operate the bulb: turn it on/off, adjust color, or change brightness, due to no authentication or encryption on the control API...

7.5CVSS7.7AI score0.00439EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2019/11/14 9:03 p.m.•35 views

CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

7.7AI score0.00439EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/14 12:00 a.m.•2 views

CVE-2019-18980: Missing Authentication for Critical Function

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

7.5CVSS7.3AI score0.00439EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2019/06/20 3:15 a.m.•8 views

CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. Th...

7.5CVSS7.5AI score0.00439EPSS
SaveExploits1References2
Rows per page
Query Builder