ESET: Fibaro Home Center Lite, Homematic Central Control Unit (CCU2) and Elko s eLAN-RF-003 are vulnerable in older versions to serious bugs that would allow information disclosure, man-in-the-middle (MiTM) attacks and unauthenticated remote code execution. The flaws were disclosed by ESET just this week, though most of them were fixed in previous updates. They still impact a number of IoT devices, the analyst firm said likely because consumers don t tend to update their device firmware very often.
Source: https://threatpost.com/connected-home-hubs-full-remote-takeover/155037/