Codema Attack: Controlling Your Smart Home Through Dangling Management Channels
summary
Analyzes 14 top-rated devices and finds real-world takeover paths where unused management channels let an attacker control locks and lights by binding to a dangling management channel when owner uses only one channel; conditions: attacker on the same Wi‑Fi and often temporary guest access. Reported issues to Apple, August, Philips Hue, ismartgate and Abode. Implements and tests CGuard, an on-device access-control shim that disables unused channels, evaluated as usable, adoptable by manufacturers, and effective at blocking the exploits.
AI-written summary · about
chapters (4)
- 0:00Start
- 10:33Understanding Codema
- 17:55Analyzing the Feasibility of Codema Attack
- 20:34Defending against the Codema Attack
related talks
35mHow I Can Unlock Your Smart Door: Security Pitfalls in Cross-Vendor IoT Access Control
41mPwning Centrally-Controlled Smart Homes
18mOwning the Smart Home with Logitech Harmony Hub
39mDilemma in IoT Access Control: Revealing Novel Attacks and Design Challenges in Mobile-as-a-Gateway
31mHacking Everything – The Dark Side of the Internet of Things
37mI Own Your Building (Management System)
30mInside the Mind of a Hacker: How a Light Bulb Almost Stopped Christmas
26mHacking buildings: Security flaws in embedded building control systems