Wardriving 2024: Using Electricity Meter Readers to Get In

Do you pentest IoT equipment before joining it to your network? I did, fortunately. I bought a Swedish reader to connect to the P1 port of my electricity meter, and found a number of vulnerabilities that in combination let an attacker “wardriving” outside my house use the P1 reader to join my Wi-Fi network! So it’s true what they say: the S in IoT stands for Security! ;)