REPLACING A SPACE HEATER FIRMWARE OVER WIFI

Summary from the TLDR InfoSec newsletter

A security team discovered a vulnerability in a Govee smart space heater allowing complete firmware control through a man-in-the-middle attack on local networks. After extended disclosure discussions with Govee in early 2024, the product was recalled as the flaw could enable malicious control of device operations.