Smart Garage Door Openers Vulnerable to Remote Hacking
A researcher has discovered severe security and privacy vulnerabilities in Nexx's garage door controller, which is used to open and close garage doors and control home security alarms and smart power plugs. The device uses a universal password to communicate with Nexx servers, and broadcasts unencrypted user data and commands, making it easy for anyone with a moderate technical background to search Nexx servers for a given email address, device ID, or name and issue commands to the associated controller. The researcher advises anyone using the device to immediately disconnect it until the vulnerabilities are fixed.