Philips vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-3562 Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability.High 8.8 · Mar 16, 2026
• CVE-2026-3561 Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 8 · Mar 16, 2026
• CVE-2026-3560 Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 8.8 · Mar 16, 2026
• CVE-2026-3559 Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability.High 8.1 · Mar 16, 2026
• CVE-2026-3558 Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability.High 8.1 · Mar 16, 2026
• CVE-2026-3557 Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 8 · Mar 16, 2026
• CVE-2026-3556 Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 8.8 · Mar 16, 2026
• CVE-2026-3555 Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability.High 8 · Mar 16, 2026
• CVE-2025-3426 We observed that Intellispace Portal binaries doesn’t have any protection mechanisms to prevent reverse engineering.High 7.2 · Apr 7, 2025
• CVE-2025-3425 The IntelliSpace portal application utilizes .NET Remoting for its functionality.High 7.3 · Apr 7, 2025
• CVE-2025-3424 The IntelliSpace portal application utilizes .NET Remoting for its functionality.High 7.7 · Apr 7, 2025
• CVE-2025-2230 A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authentication bypass.High 8.5 · Mar 13, 2025
• CVE-2025-2229 A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across all installations.High 8.5 · Mar 13, 2025
• CVE-2021-33022 Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthHigh 7.5 · Apr 1, 2022
• CVE-2021-33020 Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasHigh 8.2 · Apr 1, 2022
• CVE-2021-33018 The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sHigh 7.5 · Apr 1, 2022
• CVE-2021-27501 Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severiHigh 7.5 · Apr 1, 2022
• CVE-2021-33017 The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel thaHigh 8.1 · Dec 27, 2021
• CVE-2021-32993 IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inboundHigh 8.1 · Dec 27, 2021
• CVE-2021-39376 Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVHigh 8.8 · Aug 24, 2021
• CVE-2021-39375 Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter.High 8.8 · Aug 24, 2021
• CVE-2018-7580 Philips Hue is vulnerable to a Denial of Service attack.High 7.5 · Dec 21, 2020
• CVE-2020-16222 In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given identiHigh 8.8 · Sep 11, 2020
• CVE-2020-7360 An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticateHigh 7.4 · Aug 13, 2020
• CVE-2020-6007 Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissiHigh 7.9 · Jan 23, 2020