Philips · Philips Lighting Devices · CVE-2024-9991
**Name of the Vulnerable Software and Affected Versions**
Philips lighting devices (affected versions not specified)
**Description**
This issue is related to the storage of Wi-Fi credentials in plain text within the device firmware of Philips lighting devices. An attacker with physical access could exploit this by extracting the firmware and analyzing the binary data to obtain the plaintext Wi-Fi credentials stored on the vulnerable device. Successful exploitation could allow an attacker to gain unauthorized access to the Wi-Fi network to which the vulnerable device is connected.
**Recommendations**
At the moment, there is no information about a newer version that contains a fix for this vulnerability.