Vulnerabilty: Philips Hue Bridge Vulnerability (February 2020)

Philips Hue Bridge models 2.x running older firmware are vulnerable to hacking. Once the Hue Bridge has been hacked, attackers will get access to your home network and be able to attack or otherwise interact with other devices on your network.

How bad is this?

This is a severe risk that makes it possible for attackers to install malware on the bridge and use known exploits to infiltrate your network to spread ransomware or spyware.

Am I affected?

You are affected if you own and use the Philips Hue Bridge model 2.X running firmware before and including version 1935144020.

How can I address this risk?

Make sure you update your Philips Hue to the latest version. Here’s how to check if your Philips Hue is up-to-date.

1. On your Android or iOS phone or tablet, open the Philips Hue app.
2. On the bottom panel, click the Settings tab.
3. Scroll down, then tap Software update.
4. If your hardware (Bridge or bulb) is in need of an update, the app will notify you with a solid green bubble. Click it, then select Update.

   

5. On the same page, enable the Automatic Update to ensure you always have the latest firmware.

   

Details