CVE-2019-18980 - CVE House
Back to Database
Status published High CVE-2019-18980

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb...

Vulnerability Description

On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone can turn the bulb on or off, or change its color or brightness remotely. There is no authentication or encryption to use the control API. The only requirement is that the attacker have network access to the bulb.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-18980

Credits & Attribution

No credits recorded in the NVD database.

References

More from philips

View All →
CVE-2021-39376
Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL...
High 8.8
CVE-2021-39375
Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL...
High 8.8
CVE-2021-39369
In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the...
Unknown 0
CVE-2018-7580
Philips Hue is vulnerable to a Denial of Service attack....
High 7.5
CVE-2018-5438
Philips ISCV application prior to version 2.3.0 has an insufficient...
Medium 6.3

Affected Vendor

Affected Software

taolight smart wi-fi wiz connected led bulb 9290022656 firmware
Vulnerable Versions:
Unknown

Timeline

Official Publish: November 14th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.