CVE-2020-6007: Philips Hue Bridge v2 Firmware

High severity, CVSS 7.9. EPSS: 2.1% chance of exploitation in the next 30 days.

Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commissioning phase, resulting in a remote code execution.

Affected products

• Philips Hue Bridge v2 Firmware: up to and including 1935144020

Published 2020-01-23. Last modified 2026-06-17.