A cybersecurity researcher claims that hackers could open the Nexx garage doors, and find personal information, too
by Sebastien Bell
April 6, 2023 at 17:32
by Sebastien Bell
The convenience of using smart devices seems to be matched only by their ability to expose users and their data to hackers. The latest example of that is the Nexx garage door opener, which a cybersecurity researcher now claims is vulnerable to being hijacked.
Independent researcher Sam Sabetan was the first to publish a write-up about the security flaws, and how they could be exploited by hackers, reports Motherboard. He described five vulnerabilities that could give people with nefarious intents access to your garage and your data.
The security issues were given severity scores ranging from medium to critical. The most significant is that the use of universal credentials hard-coded in the firmware are easily obtained from a user’s communications with Nexx’s application programming interface. This could allow a hacker to collect email addresses, device IDs, and first names from the system.
Read: Researchers Hack Ferraris, Rolls-Royces, And Other Luxury Vehicles
In a video, Sabetan demonstrates the flaw. Using the official Nexx app, he opens his own garage door and then logs into a tool to see recent messages sent by the device. By capturing that data, he received information about his own system, as well as messages from 558 others that do not belong to him.
Sabetan claims that, by exploiting these security flaws, he could theoretically open any Nexx user’s garage door. Naturally, that would expose many users’ belongings, and potentially their homes, to thieves. But the vulnerabilities extend even beyond that.
advertisement scroll to continue
“That’s the craziest bug,” Sabetan told Motherboard, referring to the garage door. “But the disabling alarm and turning on [and] off smart plugs is pretty neat too.”
Since publishing his research, the security flaw has also been noted by the federal Cybersecurity & Infrastructure Security Agency. Both Sabetan and CISA say they reached out to Nexx to warn them about the issue, but neither has received any response.
As a result, customers are encouraged to take their own mitigation strategies. These include disconnecting their Nexx devices from the WiFi network, isolating control systems from business networks, and using a VPN when the device must be used.
ivermectina 6 mg – carbamazepine 400mg over the counter carbamazepine 200mg canada
azithromycin 250mg pill – zithromax price buy bystolic no prescription
buy generic prednisolone for sale – progesterone 200mg ca buy generic progesterone online
cheap neurontin pill – cheap gabapentin 800mg purchase itraconazole online
furosemide 100mg sale – brand nootropil 800 mg betnovate cost
purchase augmentin – order amoxiclav online buy cymbalta 40mg without prescription
order rybelsus 14 mg without prescription – where can i buy rybelsus periactin 4mg oral
tizanidine generic – how to buy zanaflex order hydrochlorothiazide 25 mg for sale
buy generic sildenafil – cost viagra 50mg tadalafil 10mg for sale
order generic tadalafil 40mg – cialis 10mg ca cheap sildenafil pills
cenforce 50mg pill – aralen 250mg without prescription buy glucophage 1000mg without prescription
buy atorvastatin 20mg generic – how to get lisinopril without a prescription cheap zestril 2.5mg
prilosec order online – order prilosec 20mg tenormin 100mg without prescription
buy depo-medrol pills for sale – order lyrica 75mg pills buy generic triamcinolone for sale
purchase clarinex generic – desloratadine sale priligy 90mg drug
buy cytotec 200mcg without prescription – purchase orlistat pills order diltiazem sale
order acyclovir pills – zyloprim 300mg oral buy rosuvastatin pills for sale
buy domperidone 10mg pill – flexeril price cyclobenzaprine us
domperidone medication – buy motilium 10mg sale cyclobenzaprine tablet
inderal 10mg tablet – inderal 10mg price buy methotrexate 10mg online cheap
order esomeprazole 40mg generic – buy sumatriptan 50mg without prescription buy generic sumatriptan for sale
levaquin 500mg for sale – avodart 0.5mg us purchase ranitidine for sale
purchase meloxicam generic – mobic 7.5mg drug buy tamsulosin 0.4mg without prescription