Brannon Dorsey

The issue allows unauthorized access to the device via a DNS Rebind attack, potentially resulting in remote device control and the exfiltration of privileged device and network information by an attacker.

The issue allows unauthorized access to the device via a DNS rebinding attack on the UPnP HTTP server. This can lead to remote device control and the exfiltration of privileged device and network information by an attacker.

The issue concerns a lack of protection against DNS rebinding attacks in the API service of the affected devices. This allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its local network. Attackers can extract the `scan results` JSON data, specifically the `bssid` fields, and send these fields in a "geolocation/v1/geolocate" Google Maps Geolocation API request to obtain location information.

The issue allows unauthorized access to the Local HTTP API via a DNS rebinding attack, potentially enabling remote control of device temperature. This could be exploited to alter a home's target temperature, as demonstrated by sending a `t heat` request to a device.