Bests & Worsts Reviews from Amazon

according to people

122
people found this helpful, as of 2023
ranked #230,862 most helpful out of 571,544,897 reviews
★☆☆☆☆
Security Vulnerability on the Hub/ open Web Server
I recently purchased your Sengled Element light bulbs with hub. Once I set up Sengled Hub in my test network, I scanned the hub's IP for open ports. Amazingly, the port 80 was wide open. Port 80 usually means there is a web server behind it. I tried accessing the website hosted on that port and it was an admin console page for Realtek WLAN Access Point Webserver. I looked at all the settings and found that there was no admin userID or password set. I set up admin userID and password to secure the web server a little bit.  This needs to be secured. Your customers don't have a clue that they are running a wide open web server vulnerable to hackers. While accessing various pages on the web server, it looks like I could get the password to the main wifi that the hub was connected to, which was in plain text. Hackers could also change the mode of operation of the Accesspoint to become a rogue router within the network. They can also make the hub not connect to any bulbs at all, which is bad for physical security too. Also during the general setup of the hub, I found it very uncomfortable that it is required to be connected directly to the router via ethernet and the hub must be placed into the internal wifi instead of something like a guest wifi.
December 2018 · Tools and Home Improvement · verified purchase
worser bester