Philips Hue White Ambiance A19 Bulb

From Wiki-IoT
Revision as of 06:25, 24 October 2026 by ChenXu Zhao (talk | contribs) (Philips Hue White Ambiance A19 is a Zigbee smart bulb controlled through the Hue bridge. It supports voice assistant integration, but the local API authentication design is insecure. LAN attackers can bypass access controls. Users should keep bridge firmware updated to reduce risks.)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)



Philips Hue White Ambiance A19 Bulb
Security Grade
   
     D
Calculator v
Philips Hue White Ambiance A19 Bulb
   Brand: Philips Hue (Parent: Signify)

   Category: Smart Light Bulb • Model / Gen: 1 8718699703417

   Release Date: 2018-03-20 • Status: In sale

   Classification Date:  • Official Website

Security Evaluation

1. Device Security

Criterion Value Proof Comment
Known hardware tampering Rare 🔗 Proof
Known vulnerabilities Very common [[1](https://arxiv.org/pdf/1608.03732.pdf) 🔗 Proof]
Prior attacks Rare [[2](https://arxiv.org/pdf/1608.03732.pdf) 🔗 Proof]
Updatability Rare [[3](https://developers.meethue.com/) 🔗 Proof]
Category Score Score: 3 / 3

2. System Security

Criterion Value Proof Comment
Authentication with other systems Partial 🔗 Proof
Communications Encrypted with obselete encryption 🔗 Proof
Storage Encrypted with obselete encryption 🔗 Proof
Category Score Score: 2 / 3

3. User Authentication

Criterion Value Proof Comment
Account management Basic 🔗 Proof
Authentication Basic 🔗 Proof
Brute-force protection Absent [[4](https://arxiv.org/pdf/1608.03732.pdf) 🔗 Proof]
Event logging Partial logging 🔗 Proof
Passwords Require change after setup 🔗 Proof
Category Score Score: 3 / 3

Technical Specifications

Property Details
Operating System & App Embedded Zigbee firmware (Companion App: Philips Hue)
Hardware (CPU / GPU) CPU: NXP JN5169 • GPU:
Memory & Storage Memory: 32KB RAM • Storage: 128KB Flash
Power, Battery & Charging Battery: No built-in battery • Power: 120V AC / 230V AC • Charging:
Display & Camera Display: No display • Camera: No camera
Sound & Connectivity Sound: No speaker or Microphone • Connectivity: Zigbee 3.0
Physical (Dimensions & Mass) Dimensions: 62 x 62 x 110 mm • Mass: 65g


Philips Hue White Ambiance A19 bulb requires a Hue bridge to work over Zigbee. It supports dimming and white temperature adjustment. The legacy local Hue API uses predictable tokens calculated from device MAC addresses. Attackers within the same LAN can forge valid tokens and control lights without user permission. Automatic firmware updates are delivered through the Hue mobile app and bridge.

Retrieved from "http://fehmijaafar.net/wiki-iot/index.php?title=Philips_Hue_White_Ambiance_A19_Bulb&oldid=9406"