Showing Posts From
March 2023
-
Abdullah Ansari - 2 Mar 2023
Megafeis-palm: Exploiting Vulnerabilities to Open Bluetooth SmartLocks
A security analysis of Megafeis smart padlocks revealed critical vulnerabilities in their mobile application and API. By exploiting authorization flaws, an attacker within Bluetooth range can enumerate account information and transfer lock ownership to their own account. The research demonstrates significant security weaknesses in the smart lock's backend infrastructure and mobile application.