Researchers at Rapid7 have disclosed vulnerabilities in Comcast’s Xfinity Home Security offerings. The flaws cause the system to falsely report that a home’s windows and doors are closed and secured, even if they’ve been opened. The root cause of the problem can be found in the ZigBee-based protocol used by Comcast’s system. A fix would require a software or firmware update to the base station to determine tolerance levels for radio failure conditions. Comcast was notified about the vulnerability, but the company didn’t respond to Rapid7.”]

