CloudXDAabout 2 hours ago
ESP32 devices stay exposed on Home Assistant networks
1 min read
Home Assistant does not firewall or isolate ESP32 devices, leaving them with open internet access on flat home subnets. Default ESPHome and WLED firmware makes unauthenticated outbound NTP, DNS, and OTA requests, enabling attackers to push malicious firmware or pivot to other devices.
Level
Hype check
Tap to vote and see what everyone thinks.
Summary by ByteBrief
