Ecobee Ecobee3 Lite Buffer Overflow Vulnerability

Ecobee Ecobee3 Lite is a Wi-Fi smart thermostat from Ecobee Canada.A buffer error vulnerability exists in Ecobee Ecobee3 Lite, which stems from HKProcessConfig in the product’s HomeKit wireless access control settings failing to properly validate data boundaries, which could be used by an attacker to force the device to connect to the SSID or cause a denial of service.