Hackers can crack smart garage doors due to this embarrassing security flaw

Date:
Wed, 05 Apr 2023 14:51:08 +0000

Description:
Unless you want your garage door opened by hackers, unplug your Nexx devices now and submit support tickets.

FULL STORY ======================================================================

Nexx smart garage door openers have be found to have several critical
security vulnerabilities that could see hackers able to open up your home
from anywhere in the world with a few simple steps, giving unwanted entry
into your property and exposing any valuables you may keep inside.

A series of five vulnerabilities were noted by Sam Sabetan, who in collaboration with The United States Department of Homeland Security Cybersecurity and Infrastructure Security Agency (CISA) disclosed the
findings that were first discovered in late 2022.

The vulnerabilities are estimated to affect more than 40,000 devices in residential and commercial properties, accounting for around 20,000 active Nexx account holders. Nexx smart home vulnerabilities

Beyond the smart garage door opener, Sabetan also found security issues with the companys smart plugs and, to a certain degree, its smart alarm home security system . Garage door openers can be accessed via email address,
first name and last initial, or device ID.

A timeline posted on Sabetans blog details a three-month period during which
a now closed ticket was submitted to Nexx, followed up by further communications, the opening of a case with CISA, and further attempts from Vice , which is credited with first reporting the news. Read more

Stay safe with the best smart home security cameras

Your smart speaker could be listening to more than you think

This is now the best encryption method for IoT devices, experts claim

Sabetan explains: Nexx has not replied to any correspondence from myself, DHS (CISA and US-CERT), or VICE Media Group. I have independently verified Nexx has purposefully ignored all our attempts to assist with remediation and has let these critical flaws continue to affect their customers.

The security researcher has urged all customers to unplug all Nexx devices
and to create support tickets with the company, in the hope that a mass movement may spur the company into action.

The Nexx Smart Wi-Fi Garage Door Controller NXG-200 currently retails for $79.99 but is currently marked as out of stock. Its Smart Plug NXPG-100W ($16.99) and Smart Alarm ($149.99) are available to purchase. The company
also promises 9-9 support, seven days a week, with average wait times around one hour. Nexx didnt immediately respond to TechRadar Pro s request for comment. Get some peace of mind with the best firewall



======================================================================
Link to news story: https://www.techradar.com/news/hackers-can-crack-smart-garage-doors-due-to-thi s-embarrassing-security-flaw


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)