CVE-2025-6522 — TrendMakers Sight Bulb Pro Command Injection
Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This…
Published: 2025-06-27 · CVSS: 5.2 · CVSS 4.0
Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7