Description
The Jura Internet Connection Kit for the Jura Impressa F90 coffee maker does not properly restrict access to privileged functions, which allows remote attackers to cause a denial of service (physical damage), modify coffee settings, and possibly execute code via a crafted request. NOTE: this issue is being included in CVE because the denial of service may include financial loss or water damage.
References
- 20080618 RE: A more detailed description of the Jura F90 vulnerability. mailing-list
- 46407 vdb-entry
- 29767 vdb-entry
- 20080618 A more detailed description of the Jura F90 vulnerability. mailing-list
- http://news.cnet.com/8301-10784_3-9970757-7.html
- 20080617 Hacking Coffee Makers. mailing-list
- 20080618 coffee maker hacks - yes or no? mailing-list