Demo: Backdoor Through the Front Door: Demonstrating Security Flaws in the Eufy Ecosystem
Victor Goeman, Tom Cordemans, Dairo de Ruck, Jorn Lapon, Vincent Naessens · 2024
As Internet of Things (IoT) devices become increasingly integrated into modern homes, ensuring their security is critical to safeguarding personal privacy and home networks. This demonstration reveals significant security vulnerabilities within Eufy's smart home ecosystem, including weak key derivation mechanisms and inadequate network isolation. These weaknesses allow an attacker to compromise not only the Eufy devices but also the entire home network, posing a broader risk to connected systems and sensitive data. Our demo underscores the urgent need for stronger security measures in IoT ecosystems, illustrating how flaws in edge devices can jeopardize the safety of modern smart homes and their broader infrastructures.