‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product

guest · Aug 21, 2018

‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product
August 20, 2018
https://securingtomorrow.mcafee.com...-reveals-vulnerability-in-simple-iot-product/

The Internet of Things promises to make our lives easier. Want to remotely turn lights and appliances on and off and monitor them online? A “smart plug,” a Wi-Fi–connected electric outlet, is one simple method. But IoT devices can turn into attack vectors if they are not properly secured.

We recently investigated a consumer product produced by Belkin. Our research into the Wemo Insight Smart Plug led to the discovery of an unreported buffer overflow in the libUPnPHndlr.so library. This flaw, CVE-2018-6692, allows an attacker to execute remote code. Following our responsible disclosure policy, we reported this research to Belkin on May 21. [...]
Conclusion
Discoveries such as CVE-2018-6692 underline the importance of secure coding practices on all devices. IoT devices are frequently overlooked from a security perspective; this may be because many are used for seemingly innocuous purposes such as simple home automation.
Click to expand...

Log in or Sign up

‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product

guest Guest

Log in or Sign up

‘Insight’ into Home Automation Reveals Vulnerability in Simple IoT Product

guest Guest

Useful Searches