What’s Vulnerable › Vulnerabilities

CVE-2025-6522: TrendMakers Sight Bulb Pro Command Injection

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-27 · updated 2026-06-17
• Weakness: CWE-77

Description

Unauthenticated users on an adjacent network with the Sight Bulb Pro can run shell commands as root through a vulnerable proprietary TCP protocol available on Port 16668. This vulnerability allows an attacker to run arbitrary commands on the Sight Bulb Pro by passing a well formed JSON string.

Affected products

• TrendMakers Sight Bulb Pro Firmware ZJ_CG32-2201: through 8.57.83

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02
• https://www.trendmakerscares.com/Customer-Service-Hours

Get alerted when CVE-2025-6522 or the next vulnerability affects your stack