Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Signify records in CISA KEVNo Signify vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 72
An incorrect API discovered in Signify Wiz Connected 1.9.1 allows attackers to remotely launch a DoS on Wiz devices only requiring the MAC address.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00328 · Published 2025-09-16 · No fix listed CWE-306
Priority LOW 31
The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00517 · Published 2026-08-13 · Fixed in 1.77.2071318010 CWE-306
