New Vulnerabilities In Philips Smart Lighting & Matrix Door

CERT-In issued two high-severity vulnerability advisories: CIVN-2024-0329 describes Philips Smart Lighting devices storing Wi‑Fi credentials in cleartext in firmware versions prior to 1.33.1 (allowing credential recovery via physical extraction), and CIVN-2024-0328 describes an authentication/session management bypass in Matrix Door Controller firmware prior to V2R17 (allowing remote unauthorized access). Users are advised to apply vendor firmware updates (Philips 1.33.1+, Matrix V2R17), harden authentication, segment networks, monitor access, and consider WAFs to mitigate risk.