Security News > 2021 > August > Black Hat: Security Bugs Allow Takeover of Capsule Hotel Rooms

LAS VEGAS - A series of vulnerabilities in internet of things devices often found in connected hotel rooms allowed a researcher to take control of multiple rooms' amenities - and punish a loud neighbor.

In an effort to make up for space constraints, these kinds of digs tend to offer a few electronic bells and whistles, and according to Supa, this particular hotel was no different.

In a Wednesday session at Black Hat 2021, "Hacking a Capsule Hotel - Ghost in the Bedrooms," Supa explained that an iPod touch given at check-in allows customers to control their lights, change the position of their adjustable beds, and control the ventilation fans.

All well and good - and Supa wouldn't have looked under the hood of the technology allowing the room control except for the fact that a noisy neighbor prompted him to see if he could bypass any security protections to take control of other bedrooms in the hotel.

Supa went on to further travels but came back to the same hotel a few days later - and 'Bob' was still there, exhibiting the same behavior.

When coming back to the capsule hotel the second time, Supa was assigned a different room.

News URL

https://threatpost.com/security-bugs-takeover-capsule-hotel/168376/