CVE-2025-6522

Unauthenticated users on an adjacent network with the Sight Bulb Pro can
run shell commands as root through a vulnerable proprietary TCP
protocol available on Port 16668. This vulnerability allows an attacker
to run arbitrary commands on the Sight Bulb Pro by passing a well formed
JSON string.

Assigner : ics-cert@hq.dhs.gov

More information : https://www.cisa.gov/news-events/ics-advisories/icsa-25-177-02