CVE-2025-6522

MEDIUM 5.4

Our Analysis: Embedded

Our model has classified this vulnerability as relevant to Embedded Systems, helping your team prioritize efforts effectively.

Published Date June 27, 2025

Last Modified June 30, 2025

CVSS Vector CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:L

Description

Unauthenticated users on an adjacent network with the Sight Bulb Pro can
run shell commands as root through a vulnerable proprietary TCP
protocol available on Port 16668. This vulnerability allows an attacker
to run arbitrary commands on the Sight Bulb Pro by passing a well formed
JSON string.