Philips Hue Bridge (2nd Generation)

```

Device Name	Philips Hue Bridge (2nd Generation)
Brand	Signify (Philips)
Type	Smart Lighting Hub
Released	2016
Current Firmware	1.xxx (regular OTA updates)

Device Category

Criterion	Score	Justification
Known hardware tampering	1 (None)	Small indoor device with limited physical attack value. Physical tampering provides minimal security advantage. Bitdefender Hardware Analysis
Known vulnerabilities	2 (Rare)	Some Zigbee-related vulnerabilities demonstrated including "Zigbee Bee" attack vector, but practical exploitation requires close physical proximity. Zigbee Security Research
Prior attacks	1 (None)	Smart lighting systems have not been used in large-scale botnet campaigns or mass malware infections. Mirai Target Analysis
Updatability	1 (Very common)	Philips regularly pushes firmware updates to the Hue Bridge, often adding new features and security improvements. Philips Hue Updates

Device Category Score: 2

Criterion	Score	Justification
Authentication with other systems	2 (Partial)	Local API has historically had weak authentication with no password required for LAN access. Cloud authentication is more robust but optional for basic functionality. Hue API Documentation
Communications	2 (Encrypted with obsolete encryption)	Cloud communications use TLS, but Zigbee communications to bulbs are unencrypted by default. Local API often serves over plain HTTP. Zigbee Security Research
Storage	3 (Not encrypted)	Bridge stores minimal sensitive data. Configuration and API keys stored in flash without strong encryption. CNCERT Report

System Category Score: 3

Criterion	Score	Justification
Account management	2 (Basic)	Hue app supports multiple users, but permission granularity is limited. Local API access controls are very basic. Forescout Analysis
Authentication	2 (Basic)	Cloud accounts use password authentication. Local API requires button press pairing but no ongoing authentication for LAN clients. Local Network Security
Brute-force protection	2 (Basic)	Cloud accounts have rate limiting. Local API has no protection since it relies on physical button press for pairing. LAN Security Analysis
Event logging	2 (Partial logging)	Basic configuration change logs exist, but no detailed user access log or security event history for users to review. Bitdefender Logging Analysis
Passwords	2 (Require change after setup)	Users must set up a Philips Hue account with a password. Complexity requirements are moderate. Password Policies

User Authentication Category Score: 2

GRAS Total: 7

Final Grade: C (Moderate Danger Level)

```