CoreCVE
Back

HIGH

Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories) by leveraging the ability to sniff HTTP traffic on the local intranet network

Published Sep 30, 2017

Description

Lack of Transport Encryption in the public API in Philips Hue Bridge BSB002 SW 1707040932 allows remote attackers to read API keys (and consequently bypass the pushlink protection mechanism, and obtain complete control of the connected accessories) by leveraging the ability to sniff HTTP traffic on the local intranet network.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-326

Inadequate Encryption Strength

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 30, 2017
Updated Aug 5, 2024
Reserved Sep 27, 2017
Link CVE-2017-14797
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2017-14797
Red Hat
Severity n/a
Public date n/a
Links CVE-2017-14797