I have a IoT device that works with BLE and uses a smartphone as a bridge to connect to a digital platform (cloud). The communication between the IoT device and the platform is based in PKI. The IoT device has only few privileges and services to with the platform such as status communication, public key sharing and other few status messages.

If this IoT device is hacked, could it be used as a backdoor to access or change critical information in the platform?

What can a hacker do with a hacked IoT device to threat the platform data?

The hacker will not be able to access any other data than the one allowed by the platform to that device, correct?

  • 1. maybe, but likely not. 2. only what the platform allows a device to do anyway. 3. unless there's something wrong and hidden, yes.
    – dandavis
    Commented Apr 16, 2020 at 18:22
  • Regarding the third answer, what do you mean to 'something wrong and hidden' exactly?
    – LazyTurtle
    Commented Apr 17, 2020 at 5:13
  • i mean a bug that allows capability expansion; a zero day we don't know about.
    – dandavis
    Commented Apr 17, 2020 at 7:59
  • @dandavis Thank you very much for your answer.
    – LazyTurtle
    Commented Apr 17, 2020 at 14:58


You must log in to answer this question.

Browse other questions tagged .