This vulnerability arises from improper use of a static nonce in the Secure Remote Password (SRP) authentication mechanism within the HomeKit Accessory Protocol on Philips Hue Bridge devices. The affected service listens on TCP port 8080 and does not require authentication to be exploited. By reusing the nonce, an attacker can bypass authentication, violating the intended security model. The issue is tracked as CWE-323 (Reusing a Nonce, Key Pair in Encryption). The CVSS v3.0 base score is 8.1, indicating a high impact with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Confidentiality and integrity impacts are high, while availability is not affected.

Successful exploitation allows an attacker within the network to bypass authentication on the Philips Hue Bridge device, potentially leading to unauthorized control or access to the device's functions and data. The vulnerability compromises confidentiality and integrity but does not impact availability. Since authentication is bypassed, attackers could manipulate device settings or intercept sensitive information handled by the bridge.

No patch or official fix has been identified or linked by the vendor as of the publication date. Users should monitor Philips' official advisories for updates regarding remediation. Until a fix is available, limiting network exposure of the Philips Hue Bridge, such as restricting access to trusted networks and blocking TCP port 8080 from untrusted sources, can reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.