Flaws in Diqee 360 Smart Vacuums Let Hackers Spy on Their Owners

guest · Jul 19, 2018

Flaws in Diqee 360 Smart Vacuums Let Hackers Spy on Their Owners
July 19, 2018
https://www.bleepingcomputer.com/ne...mart-vacuums-let-hackers-spy-on-their-owners/

Security researchers from Positive Technologies have released public details on two vulnerabilities affecting Dongguan Diqee 360 smart vacuum cleaners.

The two vulnerabilities allow an attacker to run malicious code on a device with superuser privileges and effectively take over the vacuum.
Technical details published today
The two vulnerabilities are CVE-2018-10987 and CVE-2018-10988. The first one can be exploited remotely, while the second needs physical access to the device.

The first bug can only be exploited by an authenticated attacker, but Positive Technologies says all Diqee 360 devices come with a default password of 888888 for the admin account, which very few users change, and which attackers can incorporate into their exploit chain.
Click to expand...

Log in or Sign up

Flaws in Diqee 360 Smart Vacuums Let Hackers Spy on Their Owners

guest Guest

Log in or Sign up

Flaws in Diqee 360 Smart Vacuums Let Hackers Spy on Their Owners

guest Guest

Useful Searches