| Philips Hue A19 Bulb (8718696548738) | ||
|---|---|---|
|
Security Grade
Calculator v
|
Philips Hue A19 Bulb
Brand: Philips Hue (Parent: Signify N.V.) Category: Smart light bulb • Model / Gen: 1st 8718696548738 Release Date: 2012-10-01 • Status: End of life Classification Date: • Official Website | |
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Known hardware tampering | Rare | 🔗 Proof | Physical disassembly is possible, mass tampering incidents are rare |
| Known vulnerabilities | Very common | 🔗 Proof | Multiple vulnerabilities including Zigbee key leakage and replay attack |
| Prior attacks | Rare | 🔗 Proof | Research attacks exist, widespread real-world attacks are uncommon |
| Updatability | Rare | 🔗 Proof | End of life, no new security firmware patches released |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Authentication with other systems | Partial | 🔗 Proof | 1. Works within Hue bridge ecosystem, limited third-party integration 2. |
| Communications | Encrypted with obselete encryption | 🔗 Proof | Early Zigbee implementation uses outdated encryption schemes |
| Storage | No encryption | 🔗 Proof | Local device storage does not store encrypted credentials |
| Category Score | Score: 3 / 3 | ||
| Criterion | Value | Proof | Comment |
|---|---|---|---|
| Account management | Full | 🔗 Proof | Full user and light management inside Philips Hue app |
| Authentication | Basic | 🔗 Proof | Relies on Hue bridge link-key authentication, no 2FA on bulb itself |
| Brute-force protection | Absent | 🔗 Proof | No built-in rate limiting against Zigbee replay or brute force attempts |
| Event logging | Partial logging | 🔗 Proof | Only on/off state events logged, no detailed access audit logs |
| Passwords | Default/Common/Easy to guess | 🔗 Proof | Early firmware had predictable Zigbee network keys |
| Category Score | Score: 3 / 3 | ||
| Property | Details |
|---|---|
| Operating System & App | Signify proprietary firmware (Companion App: Philips Hue) |
| Hardware (CPU / GPU) | CPU: Not publicly disclosed • GPU: Not publicly disclosed |
| Memory & Storage | Memory: Not publicly disclosed • Storage: Not publicly disclosed |
| Power, Battery & Charging | Battery: None • Power: AC 120 V mains power • Charging: Not applicable |
| Display & Camera | Display: None • Camera: None |
| Sound & Connectivity | Sound: None • Connectivity: Zigbee 802.15.4 |
| Physical (Dimensions & Mass) | Dimensions: 110 × 60 mm • Mass: 100 g |
This is an EOL Zigbee smart light bulb. It suffers from outdated Zigbee encryption and predictable network key vulnerabilities. It has no brute force protection and no encrypted local storage.
