Meross Smart Wi-Fi Garage Door Opener has an unspecified vulnerability

The Meross Smart Wi-Fi Garage Door Opener Msg100 is a smart garage door opener from Meross Technology China...

Meross Smart Wi-Fi Garage Door Opener 安全漏洞

The Meross Smart Wi-Fi Garage Door Opener Msg100 is a smart garage door opener from Meross Technology China...

Pwning smart garage door openers

TL;DR We reversed a smart garage door opener, which appeared pretty secure at first: The firmware was encrypted, debug access was restricted, the web server wasn’t running as root, it had unique passwords per device But we found a way in, allowing us to open all the garage doors …And made it play...