Slashdot Mirror
Oops: Security Holes In Belkin Home Automation Gear
chicksdaddy writes "The Security Ledger reports that the security firm IOActive has discovered serious security holes in the WeMo home automation technology from Belkin. The vulnerabilities could allow remote attackers to use Belkin's WeMo devices to virtually vandalize connected homes, or as a stepping stone to other computers connected on a home network. IOActive researcher Mike Davis said on Tuesday that his research into Belkin's WeMo technology found the 'devices expose users to several potentially costly threats, from home fires with possible tragic consequences down to the simple waste of electricity.' IOActive provided information on Davis's research to the US Computer Emergency Readiness Team (CERT), which issued an advisory on the WeMo issues on Tuesday. There has been no response yet from Belkin."
Well your wifi network should not have any access to the internal network... period. But I think the problem here is the devices themselves. They are in control of some high wattage appliances in your home. If they can be accessed without proper credentials, then I could see someone turning the furnace on full blast 24/7, dropping the humidity to 0 then cycling every appliance in the house on and off as fast as possible until something frys.