Software Engineering Stack Exchange is a question and answer site for professionals, academics, and students working within the systems development life cycle. It only takes a minute to sign up.
Sign up to join this community
I've found description of vulnerability here.
The kankun smart socket device and the mobile app use a hardcoded AES 256 bit key to encrypt the commands and responses between the device and the app. The communication happens over UDP. An attacker on the local network can use the same key to encrypt and send unsolicited commands to the device and hijack it.
Then how it should be done in a secure way, I mean how to encrypt communication without hard coding key in client?
You use a key exchange protocol, such as Diffie Hellman key exchange, which allows each side of the communication to generate a random number and derive a key from those numbers without an eavesdropper being able to find the result from the data actually exchanged.
In general, using a peer-reviewed protocol such as SSL/TLS avoids issues like this.
