Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1040Network Sniffing
97%
“they could be intercepted from wi - fi packets transmitted in close proximity. to demonstrate this, bishop fox staff intercepted wi - fi packets using airodump - ng in monitor mode : % sudo airodump - ng – bssid [ router _ bssid ] - - channel [ channel _ number ] - w capture [ in…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1190Exploit Public-Facing Application
85%
“##pointid " : " ncerne " } }.. figure 8 - mqtt packets sent by the mobile application an attacker could exploit this vulnerability to capture the device id ( for use with the issue discussed in the insufficient authorization controls – mqtt broker finding ), the device or mobile …”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1557Adversary-in-the-Middle
48%
“staff could interact with mqtt topics intended for the yolink smart hub. bishop fox staff observed that it did not appear that the devices could be controlled using their own mqtt credentials because any attempts to authenticate would disrupt the device ’ s active mqtt connection…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
T1190Exploit Public-Facing Application
31%
“##88b [ redacted ] / tx, payload = 165byte, qos = at _ most _ once, retain = false } … omitted for brevity … figure 4 - publishing to smart lock mqtt topic with unauthorized account by exploiting this issue, an attacker could potentially open doors secured using yolink locks or c…”
Which technique(s) should be tagged here? Pick zero or more — leaving blank just records that the original was wrong.
No matches for .
Loading techniques…
Summary
The following document describes identified vulnerabilities in the YoLink Hub smart device version 0382.