CVE-2018-7580

Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The "hub" will stop operating and be frozen until the flood stops. During the flood, the user won't be able to turn on/off the lights, and all of the hub's functionality will be unresponsive. The cloud service also won't work with the hub.

• CWE-400

• http://packetstormsecurity.com/files/160724/Philips-Hue-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Dec/51Exploit, Mailing List, Third Party Advisory
• https://www.iliashn.com/CVE-2018-7580/Exploit, Third Party Advisory
• http://packetstormsecurity.com/files/160724/Philips-Hue-Denial-Of-Service.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2020/Dec/51Exploit, Mailing List, Third Party Advisory
• https://www.iliashn.com/CVE-2018-7580/Exploit, Third Party Advisory

Published

Dec 21, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-7573An issue was discovered in FTPShell Client 6.7. A remote FTP…
• CVE-2018-7574Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-7575Google TensorFlow 1.7.x and earlier is affected by a Buffer …
• CVE-2018-7576Google TensorFlow 1.6.x and earlier is affected by: Null Poi…
• CVE-2018-7577Memcpy parameter overlap in Google Snappy library 1.1.4, as …
• CVE-2018-7579\application\admin\controller\update_urls.class.php in YzmCM…
• CVE-2018-7581\ProgramData\WebLog Expert\WebServer\WebServer.cfg in WebLog…
• CVE-2018-7582WebLog Expert Web Server Enterprise 9.4 allows Remote Denial…
• CVE-2018-7583Proxy.exe in DualDesk 20 allows Remote Denial Of Service (da…
• CVE-2018-7584In PHP through 5.6.33, 7.0.x before 7.0.28, 7.1.x through 7.…
• CVE-2018-7586In the nextgen-gallery plugin before 2.2.50 for WordPress, g…
• CVE-2018-7587An issue was discovered in CImg v.220. DoS occurs when loadi…