CVE-2025-6522 Information

Jun 28, 2025 cve

Description

Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string.

Reference

https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02 https://www.trendmakerscares.com/Customer-Service-Hours

CNNVD-202506-3594 (Published: 2025-06-27)

Share on: