Friday, January 3, 2025

Indian Researchers Uncover Security Vulnerabilities in Philips Lighting Devices

Posted in
on
On October 25, CERT-In issued an advisory highlighting security vulnerabilities in several Philips Lighting devices, following a discovery by Mumbai cybersecurity researcher Shravan Singh. After installing a Philips smart tube light at home, Singh found that its ESP chipset stored sensitive Wi-Fi credentials in plain text, posing a potential risk for unauthorized access to users’ networks. Further investigations revealed similar vulnerabilities across multiple other Philips smart lighting products. Singh, along with his research colleagues, reported these issues to Philips, which has since begun addressing the vulnerabilities while crediting the researchers for their contributions to enhancing device security. The advisory warns users about the risks associated with discarded smart lighting devices still containing unprotected sensitive data.

Read More