Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability

Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Philips Hue Bridge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ed25519_sign_open function. The issue results from improper verification of a cryptographic signature. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-28480.

N/A

密码学签名的验证不恰当

Philips Hue Bridge 数据伪造问题漏洞

Philips Hue Bridge是日本Philips Hue公司的一款智能照明网关设备。 Philips Hue Bridge存在数据伪造问题漏洞，该漏洞源于ed25519_sign_open函数对加密签名的验证不当，可能导致身份验证绕过。

N/A

N/A