Hackers Could Open Your Garage Door From Anywhere in the World If You Use Nexx Smart Devices The WiFi-enabled security system reportedly has several vulnerabilities, some of which are so worrisome a researcher has advised users to cease using them until issues are resolved.
By Madeline Garfinkle Edited by Jessica Thomas
Our biggest sale — Get unlimited access to Entrepreneur.com at an unbeatable price. Use code SAVE50 at checkout.*
Claim Offer*Offer only available to new subscribers
Opinions expressed by Entrepreneur contributors are their own.
On April 4, Sam Sabetan, an offensive security engineer at Amazon, published findings that Nexx's smart device products are subject to chilling vulnerabilities — including hackers being able to remotely open users' garage doors without their consent. Other vulnerabilities include being able to take control of alarms and switch smart plugs on and off for any user.
Sabetan stated that hackers could open garage doors from anywhere in the world. In addition to his blog post, he also uploaded a video proving his claims.
"It is estimated that over 40,000 devices, located in both residential and commercial properties, are impacted," he wrote in a Medium blog post. "Furthermore, I determined that more than 20,000 individuals have active Nexx accounts."
Related: Apple to Roll Out First of Its Kind Technology to Protect Users from Hackers, Spyware
Sabetan also stated that Nexx has "consistently ignored" all attempts at communication from him, the media and the Department of Homeland Security. Sabetan advises any Nexx users to immediately disconnect all devices until the issues are confirmed to be resolved.
The Cybersecurity and Infrastructure Security Agency also posted a warning about the Nexx Garage Door Controller, Smart Plug and Smart Alarm's vulnerabilities.
Nexx has not responded to the claims. However, on its website, the tabs for Garage, Alarm and Plug all show a "Page Not Found" message as of Thursday morning.
Screenshot of Nexx's Smart Garage tab on Thursday April 6, 2023 at 11:01am.
Related: Hackers Steal $620 Million in Massive Gaming Crypto Heist