Philips Hue A19 Bulb (8718696548738)

Philips Hue A19 Bulb (8718696548738)
Security Grade F Calculator v1	Philips Hue A19 Bulb Brand: Philips Hue (Parent: Signify N.V.) Category: Smart light bulb • Model / Gen: 1st 8718696548738 Release Date: 2012-10-01 • Status: End of life Classification Date: 2026-10-28 • Official Website

Security Evaluation

1. Device Security

Criterion	Value	Proof	Comment
Known hardware tampering	Rare	🔗 Proof	Physical disassembly is possible, mass tampering incidents are rare
Known vulnerabilities	Very common	🔗 Proof	Multiple vulnerabilities including Zigbee key leakage and replay attack
Prior attacks	Rare	🔗 Proof	Research attacks exist, widespread real-world attacks are uncommon
Updatability	Rare	🔗 Proof	End of life, no new security firmware patches released
Category Score	Score: 3 / 3

2. System Security

Criterion	Value	Proof	Comment
Authentication with other systems	Partial	🔗 Proof	1. Works within Hue bridge ecosystem, limited third-party integration 2.
Communications	Encrypted with obselete encryption	🔗 Proof	Early Zigbee implementation uses outdated encryption schemes
Storage	No encryption	🔗 Proof	Local device storage does not store encrypted credentials
Category Score	Score: 3 / 3

3. User Authentication

Criterion	Value	Proof	Comment
Account management	Full	🔗 Proof	Full user and light management inside Philips Hue app
Authentication	Basic	🔗 Proof	Relies on Hue bridge link-key authentication, no 2FA on bulb itself
Brute-force protection	Absent	🔗 Proof	No built-in rate limiting against Zigbee replay or brute force attempts
Event logging	Partial logging	🔗 Proof	Only on/off state events logged, no detailed access audit logs
Passwords	Default/Common/Easy to guess	🔗 Proof	Early firmware had predictable Zigbee network keys
Category Score	Score: 3 / 3

Technical Specifications

Property	Details
Operating System & App	Signify proprietary firmware (Companion App: Philips Hue)
Hardware (CPU / GPU)	CPU: Not publicly disclosed • GPU: Not publicly disclosed
Memory & Storage	Memory: Not publicly disclosed • Storage: Not publicly disclosed
Power, Battery & Charging	Battery: None • Power: AC 120 V mains power • Charging: Not applicable
Display & Camera	Display: None • Camera: None
Sound & Connectivity	Sound: None • Connectivity: Zigbee 802.15.4
Physical (Dimensions & Mass)	Dimensions: 110 × 60 mm • Mass: 100 g

This is an EOL Zigbee smart light bulb. It suffers from outdated Zigbee encryption and predictable network key vulnerabilities. It has no brute force protection and no encrypted local storage.