Alexey Usanov. Wire is good, wire is reliable: Wiren Board automation solutions research
Wire is good, wire is reliable: research on automation solutions by Wiren Board
Alexey Usanov
Head of HW_LAB, Positive Technologies
The study examined sensors and controllers from Wiren Board, a manufacturer of home and commercial automation products. The report will describe how a MitM attack was implemented between a sensor and a central gateway. Afterward, the user attempted to update the sensor's firmware to their own, but all updates were encrypted.
As a result, the study involved understanding the sensor hardware and the specific security mechanisms implemented within GigaDevice microcontrollers, which led to a comprehensive analysis of the entire GigaDevice microcontroller line and the discovery of numerous critical vulnerabilities. Using some of these vulnerabilities, the researchers were able to decrypt firmware updates, access critical data, and implement remote operation.