| Philips Hue White A19 (9290022166)
|
|
Security Grade
Calculator v
|
Philips Hue White A19 (9290022166)
Category: Smart Bulb • Model / Gen: White A19 9290022166
Release Date: 2019-01-01 • Status: In sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
—
|
Highly integrated physical design; no accessible ports for hardware tampering.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
The bulb itself has few known CVEs; the historical risk was mostly related to the Hue Bridge (e.g., Zigbee overflow).
|
| Prior attacks
|
Rare
|
🔗 Proof
|
No widespread botnet attacks recorded directly on the bulbs due to Zigbee isolation.
|
| Updatability
|
Very common
|
🔗 Proof
|
Firmware updates are pushed automatically via the Hue Bridge.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Full
|
🔗 Proof
|
Requires secure pairing with the Hue Bridge for operation.
|
| Communications
|
Encrypted with up-to-date encryption
|
—
|
Uses Zigbee protocol which employs AES encryption for local mesh networking.
|
| Storage
|
No encryption
|
—
|
Only stores basic network state; no sensitive user data is stored locally.
|
| Category Score
|
Score: 2 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
—
|
Managed securely through the Philips Hue cloud account and bridge.
|
| Authentication
|
Secure
|
—
|
App-based authentication tied to the physical bridge.
|
| Brute-force protection
|
Exist
|
—
|
Cloud login and bridge pairing have built-in rate limiting.
|
| Event logging
|
Partial logging
|
—
|
App logs automation routines and basic on/off history.
|
| Passwords
|
Require change after setup with complexity requirements
|
—
|
Hue account creation enforces password complexity.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Embedded Firmware (Zigbee) (Companion App: Philips Hue App)
|
| Hardware (CPU / GPU)
|
CPU: • GPU:
|
| Memory & Storage
|
Memory: • Storage:
|
| Power, Battery & Charging
|
Battery: • Power: 9W LED (60W Equivalent) • Charging:
|
| Display & Camera
|
Display: • Camera: N/A
|
| Sound & Connectivity
|
Sound: N/A • Connectivity: Zigbee (requires Hue Bridge)
|
| Physical (Dimensions & Mass)
|
Dimensions: 2.4 x 2.4 x 4.3 inches • Mass: 2.4 ounces
|
The Philips Hue White A19 is a smart bulb utilizing the Zigbee protocol, which isolates it from direct IP-based internet attacks. Security depends heavily on the Hue Bridge, which enforces AES encryption. While a historical Zigbee vulnerability (CVE-2020-6007) affected the bridge, the bulbs themselves maintain a low attack surface. Firmware updates are automatically handled via the bridge, making this a relatively low-risk IoT device.
