| Philips Hue Bridge (2nd Gen, BSB002)
|
|
Security Grade
Calculator v1
|
Philips Hue Bridge 2nd Generation
Release Date: 2015-10-01 • Status: End of sale
Classification Date: 2026-10-21
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
—
|
CVE-2020-6007 is a Zigbee-stack heap overflow reachable over the air, not a physical-tampering case; no documented mass hardware tampering for the BSB002.
|
| Known vulnerabilities
|
Very common
|
—
|
Zigbee worm-style heap overflow (CVE-2020-6007), missing transport encryption in the local API (CVE-2017-14797) and a further 2026 cluster of HomeKit/Zigbee stack overflows and pairing bypasses affect the Bridge family.
|
| Prior attacks
|
Rare
|
—
|
The Bridge is not listed in CISA KEV; CVE-2020-6007 was demonstrated by researchers as a self-spreading Zigbee attack rather than an observed campaign.
|
| Updatability
|
Very common
|
—
|
Automatic firmware updates through the Hue app; Signify states a defined support period of at least 36 months from purchase.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
—
|
Bridge brokers authenticated pairing with Apple Home, Alexa, Google Home, SmartThings and Matter, with per-integration key exchange.
|
| Communications
|
Encrypted with up-to-date encryption
|
—
|
Cloud and app traffic use TLS with certificate pinning in the Hue app, and local API v2 is HTTPS-only; the plaintext-API flaw in CVE-2017-14797 was fixed in later firmware.
|
| Storage
|
Encrypted with up-to-date encryption
|
—
|
Zigbee network and link keys are stored in protected onboard flash and never exposed through the API; no user data is stored in the clear.
|
| Category Score
|
Score: 1 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
—
|
Hue account manages homes, members, remote access and per-app API keys, with the physical link button gating new pairings.
|
| Authentication
|
Basic
|
—
|
Password plus e-mail verification for the account and physical-button pairing for local admins; no enforced MFA for the Hue account.
|
| Brute-force protection
|
Basic
|
—
|
Cloud login is rate limited, but the local API relies on the pairing button rather than a lockout policy for repeated token attempts.
|
| Event logging
|
Partial logging
|
—
|
The app lists connected apps and recent activity, but there is no detailed authentication audit log for the owner.
|
| Passwords
|
Require change after setup with complexity requirements
|
—
|
Hue account passwords must meet Signify's complexity policy; there is no factory-default device password to leave unchanged.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Hue Bridge firmware (embedded Linux) (Companion App: Philips Hue app (Android/iOS))
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage: Onboard flash for keys, scenes and schedules
|
| Power, Battery & Charging
|
Battery: • Power: 5 V DC 600 mA adapter • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity: Ethernet RJ-45, Zigbee (IEEE 802.15.4), Bluetooth (newer firmware)
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Reasoning: The BSB002 is one of the better-architected consumer hubs: no default credentials, physical-button pairing, pinned TLS to the cloud, per-integration keys and a published support period. It still accumulates CVEs because its Zigbee and HomeKit stacks are large attack surfaces, and the local API historically lacked transport encryption. Scope note: rated for a current firmware build with the Bridge on Ethernet; older firmware before the API hardening and the 2026 stack fixes would score lower. The model has been superseded by the Bridge Pro and is assessed as end of sale.
