118
Millions of SharkNinja devices may be vulnerable to spying, researcher says (cybernews.com)
submitted 3 months ago by to c/technology@lemmy.world
14 comments fedilink hide all child comments
 

Shark vacuum robots have an unpatched flaw that could let attackers access cameras, WiFi passwords, and home maps, researcher claims.

Researcher Tokay0 says SharkNinja failed to fix the issue more than 90 days after private disclosure.

The flaw involves AWS IoT certificates, with 673,000 exposed SharkNinja devices observed in one AWS region.

you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 3 months ago

To get to the certificate with which you THEN can attack devices remotely. I.e. the attacker needs one device. And the skill to extract the certificate and the willingness to abuse it.

One of each and then the 613k devices in the tested region are exposed.

  • permalink
  • fedilink
  • source
  • parent