Insufficient authentication/authorization

Authentication issues present a real security concern for IoT devices. If interfaces are not secured with strong passwords, devices can be compromised. As you can see, even though the devices and appliances are new, attacking techniques are old. It is all about the behavior of the user. In order to avoid this type of attack, make sure that all the passwords are strong, and that you change every default password. As an example, you can use https://howsecureismypassword.net/ to check your password's strength:

Get Advanced Infrastructure Penetration Testing now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.