You do not have permission to edit this page, for the following reasons:
Documentation-based security assessment: Philips Hue Bridge (square Bridge v2, model 9290022856 / BSB). Reviewed 2026-10-24. 2 3 Documentation-based assessment of a defined Hue Bridge v2 profile connected by Ethernet to the router and controlled through the Philips Hue app bound to a Hue cloud account. First setup pairs the bridge to the app, and new third-party/local API users can only be provisioned after a physical press of the bridge's top link button, which issues a long random whitelist username. Remote/away control runs over Signify's cloud; lights and accessories join the bridge over Zigbee. Firmware updates are installed automatically through the Hue app/cloud. Bridge configuration, whitelist and schedules reside on internal flash with no documented at-rest encryption. These are the explicitly selected conditions of this document assessment, not a claim about factory defaults or an inspected physical unit. 4 5 Ratings map documented capabilities and the stated configuration to WikiIoT choices. Uncommon/Rare are qualitative assessments of documented bounded exposure/history, not measured frequencies. Prior attacks are based on Pwn2Own/ZDI coordinated disclosure and academic research, not observed mass exploitation of consumer bridges. A plaintext local HTTP API alongside HTTPS cloud control is rated Partial communications. Internal flash with no documented encryption is rated No encryption. The physical link-button pairing is treated as an anti-bruteforce control (Exist). Optional capabilities are not treated as enabled unless the assessment configuration states so. Historical CVEs do not imply that the current auto-updated firmware remains vulnerable. 6 7 Release-date scope: 2021, the documented square Hue Bridge v2 generation per the official release-notes page (which states all notes from 2020-04-30 refer to Bridge v2); not asserted to be the earliest worldwide retail date. 8 9 Historical vulnerability: CVE-2026-3561 (heap-based buffer overflow / RCE in the HomeKit HAP characteristics handler, hk_hap, network-adjacent after an authentication bypass; tracked as ZDI-CAN-28479 / ZDI-26-159), with related Bridge v2 findings CVE-2026-3555, CVE-2026-3556 and CVE-2026-3562, and the older CVE-2020-6007 Bridge v2 RCE. Affected firmware is Bridge v2 builds prior to the vendor fix; Signify ships fixes through the automatic Hue app firmware channel. Research context: Synacktiv over-the-air Zigbee exploitation and SSTIC 2026 HomeKit SRP/pairing analysis. 10 11 No physical device was tested. Keep the configuration and evidence scope with the ratings. 12 13 References: 14 [https://www.philips-hue.com/en-us/p/hue-bridge/046677458478 Philips Hue Bridge official product page] 15 [https://www.philips-hue.com/en-us/support/release-notes/bridge Hue Bridge release notes (Bridge v2)] 16 [https://developers.meethue.com/develop/get-started-2/ Philips Hue developer — get started (local API pairing)] 17 [https://www.philips-hue.com/en-us/explore-hue/faq/controls/how-to-connect-hue-bridge-to-wifi Hue Bridge setup — top link button and LEDs] 18 [https://dev.philips-hue.com/content/hue/sg/en/explore-hue/how-it-works.html How Philips Hue works — Bridge Ethernet + Zigbee] 19 [https://dev.philips-hue.com/content/hue/sg/en/products/all-products/product-page.hue_bridge.html Hue Bridge power specifications] 20 [https://www.philips-hue.com/zh-tw/p/hue-bridge/8719514342507 Hue Bridge product dimensions and weight] 21 [https://www.sentinelone.com/vulnerability-database/cve-2026-3561/ CVE-2026-3561 — Hue Bridge v2 HAP RCE (ZDI-26-159)] 22 [https://www.synacktiv.com/en/publications/make-it-blink-over-the-air-exploitation-of-the-philips-hue-bridge.html Synacktiv — over-the-air exploitation of the Hue Bridge] 23 [https://www.philips-hue.com/en-ca/support/security-advisory Philips Hue security advisory / responsible disclosure] 24 [https://fehmijaafar.net/wiki-iot/index.php/Methodology WikiIoT methodology]
For new submissions, pages will appear blank until approval.
Summary: This is a minor edit Watch this page
Save page Show preview Show changes Cancel
