Researchers Uncover Vulnerabilities in Cellular-Connected Home Security Systems, Enabling Remote Freezing Attacks
Researchers have identified critical vulnerabilities in cellular-connected home security systems that could allow attackers to remotely disable their communication capabilities. This 'Home Security System Freezing' attack exploits weaknesses in how lost and stolen device reports are handled by cellular carriers. By briefly disrupting a home security gateway's Wi-Fi connection, an attacker can obtain its International Mobile Equipment Identity (IMEI) from its cellular IoT modem. This IMEI can then be fraudulently reported as lost, blacklisting the device and preventing it from communicating with homeowners or monitoring centers. This disruption could block crucial alarm notifications during emergencies. The researchers found that two major U.S. home security providers, collectively holding over 41% of the market, utilize cellular IoT modem chipsets susceptible to this attack. The vulnerabilities stem from a lack of standardized procedures by organizations like 3GPP and GSMA for verifying the identity of ind...
