Set of bugs puts software company and IoT device makers into motion Or some device makers at least. No comment from Wyze. https://therecord.media/throughtek-kalay-software-vulnerabilities-roku-wyze-owlet Cybersecurity researchers and Internet of Things (IoT) technology companies say they worked t…

A quote from the linked article: A Roku spokesperson said a mandatory patch was issued in January and that an attack could only be launched if the hacker had access to the device owner’s WiFi network. So only if someone is attached to YOUR network.

Following the trail from the article to Bitdefender’s blog post and from there to Bitdefender’s white paper describing their vulnerability testing against the Cam v3, it looks like Bitdefender’s timeline squares pretty well with Wyze’s own timeline of firmware updates for that camera, which at least…

Yeah, I remember reading about detection zone issues—and some “ Random acts… ”—and now following the trail back through Bitdefender to Wyze’s own timeline makes me wonder if yet another “fix” inadvertently broke something else, as is often the case. Scrolling through the firmware history indicates th…

[image] peepeep: Throughtek TUTK was only used to authenticate P2P connection between cam and phone. Reading through the vulnerabilities, it appears to do more. It looks to me like all of those CVE’s are related to authentication. AuthKey is about authentication, Pre-shared key is related to …

[image] carverofchoice: Sometimes I’m even sad about them getting patched, like the one that allowed us to access the SD card recordings if we were on own secure network anyway, but nobody could do it remotely. I would’ve loved to have been able to access my camera SD cards from my laptop and wa…

We should hear about this in 3 years or so

Cameras

peepeep May 22, 2024, 5:18pm 4

My memory is that Throughtek TUTK was only used to authenticate P2P connection between cam and phone. Reading through the vulnerabilities, it appears to do more.

Topic		Replies	Views
Update Your Wyze Cam v3 Firmware For Latest Security Updates 10/30/23 Wyze News	52	13210	January 31, 2024
We are all patched! Update on the latest firmware releases Wyze News	2	2199	November 16, 2023
Productive concern. Informed complaint Cameras cam-pan-v1 , cam-v1-v2 , bug , cam-v3 , cam-pan-v2	2	615	April 3, 2022
READ THIS THREAD! RATE THE THREAT! :military_helmet: Watercooler bug	13	1845	April 3, 2022
Wyze in the news today, and it’s not good Watercooler bug	52	3659	February 25, 2023

We should hear about this in 3 years or so

Related topics