An unchanged credential allows anyone to virtually control door locks and elevators at dozens of apartment buildings across North America, a security researcher found. © 2024 TechCrunch. All rights reserved. For personal use only.
The article discusses a critical security flaw in Hirsch's Enterphone MESH door access system, where a default password allows unauthorized access to numerous buildings. A researcher, Eric Daigle, identified 71 exposed systems using this default password, enabling easy exploitation. Hirsch argues the issue stems from customers not changing the default password, despite not prompting users to do so. The company's refusal to address the flaw leaves many buildings vulnerable. This highlights the importance of secure default settings and the need for companies to ensure product security.
