Check Point researchers have discovered a new vulnerability affecting Philips Hue lightbulbs that can be exploited over-the-air from over 100 meters away to gain entry into a targeted WiFi network. The vulnerability resides in the way Philips implemented the Zigbee communication protocol in its smart light bulb, leading to a heap-based buffer overflow issue. Check Point responsibly reported these vulnerabilities to Philips and Signify, owner of the Philips Hue brand, in November 2019, who just last month released an updated, patched firmware for the device.
Source: https://thehackernews.com/2020/02/philips-smart-light-bulb-hacking.html