Smart IoT home hubs vulnerable to remote code execution attacks

LASER_oneXM

Level 37
Thread author
Verified
Top Poster
Well-known
Forum Veteran
Feb 4, 2016
2,516
15,625
3,578
53
Germany / Poland
IoT hubs used in homes and offices were found to be susceptible to exploit due to critical bugs in their firmware.

A range of smart Internet of Things (IoT) hubs commonly found in our homes and offices are harboring severe security flaws, researchers have found.

On Wednesday, the ESET cybersecurity team said three different hubs -- the Fibaro Home Center Lite, eQ-3's Homematic Central Control Unit (CCU2) and ElkoEP's eLAN-RF-003 -- contained bugs dangerous enough to trigger remote code execution (RCE), data leaks, and Man-in-the-Middle (MitM) attacks.

The Fibaro Home Center Lite is a compact, simple controller for managing intelligent devices such as smart lighting and appliances. eQ-3's Homematic CCU2, a legacy product followed by the CCU3, manages programming and logic functions for Homematic appliances, and the eLAN-RF-003, developed by ElkoEP, is a smart RF box that can be connected to a LAN to control networks via mobile devices.
... ...