{"id":5390,"date":"2026-09-29T22:10:10","date_gmt":"2026-09-29T22:10:10","guid":{"rendered":"https:\/\/netguide.io\/news\/2026\/09\/29\/midea-portasplit-controlable-a-traves-de-bluetooth-sin-pin\/"},"modified":"2026-09-29T22:10:11","modified_gmt":"2026-09-29T22:10:11","slug":"midea-portasplit-controlable-a-traves-de-bluetooth-sin-pin","status":"publish","type":"post","link":"https:\/\/netguide.io\/news\/es\/2026\/09\/29\/midea-portasplit-controlable-a-traves-de-bluetooth-sin-pin\/","title":{"rendered":"Midea PortaSplit: Controlable a trav\u00e9s de Bluetooth Sin PIN"},"content":{"rendered":"<div id=\"netgu-273156341\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p class=\"wp-block-paragraph\"><strong>Seg\u00fan un informe de heise online, el acondicionador de aire m\u00f3vil Midea PortaSplit puede ser controlado por terceros a trav\u00e9s de Bluetooth sin autenticaci\u00f3n. Un atacante dentro del rango de radio puede activar y apagar la unidad, cambiar la temperatura entre refrigeraci\u00f3n y calefacci\u00f3n y cambiar la temperatura \u2013 superando el PIN y emparejando la aplicaci\u00f3n normalmente requiere.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">C\u00f3mo funciona el defecto<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">El problema radica en el SDK Bluetooth OEM de Midea, que no verifica un dispositivo PIN. Los comandos de control est\u00e1n cifrados en AES, pero las teclas de emparejamiento se pueden calcular a partir de la informaci\u00f3n que el propio dispositivo transmite a trav\u00e9s de Bluetooth. Esto permite a un atacante realizar comandos v\u00e1lidos y apoderarse de la unidad.<\/p><div id=\"netgu-4065843545\" class=\"netgu-content netgu-entity-placement\"><aside class=\"deals-top deals-top--compact\">\n\n\t\t\t<h3 class=\"deals-top__title\">Top-Deals<\/h3>\n\t\n\t\t\t<ul class=\"deals-top__list\">\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/moon-knight-digital-watch-face-fuer-wear-os-4\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/deal-27-150x150.png\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">MOON KNIGHT Digital Watch Face f\u00fcr Wear OS 4+<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>0.89 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/train-sim-world-7-starter-pack-kostenlos-fuer-ps4-ps5-xbox-pc\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/capsule_616x353-11-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Train Sim World 7: Starter Pack kostenlos f\u00fcr PS4, PS5, Xbox, PC<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/ml2u-watchfaces-fuer-wearos-im-google-play-store-2\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844734_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">ML2U Watchfaces f\u00fcr WearOS im Google Play Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>1.39 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenloses-dlc-bundle-fuer-gears-of-war-e-day-liquid-death-bundle\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844571_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenloses DLC-Bundle f\u00fcr Gears of War E-Day \u2013 Liquid Death Bundle<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenlose-emote-im-clash-royale-store\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/share-image-clashroyale-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenlose Emote im Clash Royale-Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t<\/ul>\n\n\t\t\t\t\t<p class=\"deals-top__more\">\n\t\t\t\t<a href=\"https:\/\/netguide.io\/deals\/\">Alle Deals ansehen \u2192<\/a>\n\t\t\t<\/p>\n\t\t\t<\/aside>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Importante: solo local, sin acceso a internet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Para contexto: la vulnerabilidad se limita a la gama Bluetooth de unos diez metros. El control remoto sobre Internet o la nube es expl\u00edcitamente <strong>no<\/strong> posible. Por lo tanto, un atacante tendr\u00eda que estar en las inmediaciones del dispositivo, por ejemplo en el piso vecino o fuera de la ventana.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Respuesta de Discovery y Midea<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">An\u00f3nimo whistleblower inform\u00f3 el tema para subir a mediados de agosto de 2026; el equipo editorial lo confirm\u00f3 utilizando una aplicaci\u00f3n de prueba de contacto y scripts Python. Midea fue inicialmente desmisiva pero m\u00e1s tarde reconoci\u00f3 la falla y, seg\u00fan la empresa, est\u00e1 trabajando en una actualizaci\u00f3n de firmware OTA actualmente en su fase de prueba y validaci\u00f3n. Seg\u00fan el informe, todos los dispositivos PortaSplit parecen estar afectados; hasta ahora no se ha asignado CVE.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Lo que los propietarios afectados pueden hacer ahora<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Hasta que un parche est\u00e9 disponible, la funci\u00f3n Bluetooth puede ser deshabilitada, aunque esto limita las caracter\u00edsticas inteligentes. Si utiliza el PortaSplit d\u00eda a d\u00eda, encontrar\u00e1 m\u00e1s en operaci\u00f3n y cuidado en nuestro <a href=\"https:\/\/netguide.io\/de\/blog\/midea-portasplit-faq-tipps\/\" rel=\"noopener\" target=\"_blank\">Midea PortaSplit FAQ<\/a>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Fuente: <a href=\"https:\/\/www.heise.de\/hintergrund\/Mobile-Klimaanlage-Midea-PortaSplit-laesst-sich-von-jedermann-fernsteuern-11417163.html\" rel=\"noopener\" target=\"_blank\">en l\u00ednea<\/a>.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>El Midea PortaSplit en Amazon:<\/em><\/p>\n\n\n\n<div class=\"atkp-container atkp-box-box  atkp-template-box\">\n                        <div class=\"atkp-box atkp-clearfix atkp-smallbox \"\n                 style=\"\">\n                <div class=\"atkp-predicateheadline atkp-predicate-highlight\">\n                    <span><\/span><\/div>\n                <div class=\"atkp-thumb\">\n                                            <img decoding=\"async\" class=\"atkp-image\" src=\"https:\/\/netguide.io\/news\/?a_image=1&amp;pid=1960&amp;lid=0&amp;sid=1164&amp;name=aHR0cHM6Ly9tLm1lZGlhLWFtYXpvbi5jb20vaW1hZ2VzL0kvMzFFZjQ2dmxQNUwuX1NMMTYwXy5qcGc%3D&amp;key=5d39fd174f8429aa95289bddb103462ea27a44bfe7dbeafc50c72279eaebf833\"\n                             alt=\"Midea Portasplit Mobile W&auml;rmepumpe, Klimaanlage, K&uuml;hlen A++\/Heizen A+, 12000 BTU 3, 5kW, f&uuml;r R&auml;ume bis zu 42 m&sup2; \/ 105 m&sup3;, nur 39 dB(A) im Silent-Modus\"\/>\n                                                                    <div class=\"atkp-rating\"><span class=\"atkp-star atkp-star-0 atkp-star-00\" title=\"0.00 of 5 stars\"><\/span><\/div>\n                                                                                    <div class=\"atkp-reviews\">Show customer reviews<\/div>\n                                                                                        <\/div>\n                <div class=\"atkp-content\">\n                                            <a class=\"atkp-title\" href=\"https:\/\/www.amazon.de\/dp\/B0D3PP64JS?tag=netguideio-21&linkCode=ogi&th=1&psc=1\" rel=\"sponsored nofollow noopener\" target=\"_blank\" onclick=\"_paq.push(['trackEvent', 'affiliate-toolkit Link', 'Link (box, Amazon.de)', ' (Midea PortaSplit: Controlable a trav\u00e9s de Bluetooth Sin PIN)']);\" title=\"Buy now at Amazon.de\">Midea Portasplit Mobile W&auml;rmepumpe, Klimaanlage, K&uuml;hlen A++\/Heizen A+, 12000 BTU 3, 5kW, f&uuml;r R&auml;ume bis zu 42 m&sup2; \/ 105 m&sup3;, nur 39 dB(A) im Silent-Modus*<\/a>\n                                        <div class=\"atkp-author\">by Midea<\/div>\n                                            <div class=\"atkp-shoplogo\">Amazon.de<\/div>\n                                    <\/div>\n                <div class=\"atkp-bottom\">\n                                            <span class=\"atkp-price atkp-listprice\"><\/span>\n                                                                <span class=\"atkp-price atkp-savedamount\"><\/span>\n                                                                <span class=\"atkp-price atkp-saleprice\">\n                            &nbsp;Price not available\n                                                            <span class=\"atkp_price atkp-baseprice\"><\/span>\n                                                    <\/span>\n                                                                <a href=\"https:\/\/www.amazon.de\/dp\/B0D3PP64JS?tag=netguideio-21&linkCode=ogi&th=1&psc=1\" rel=\"sponsored nofollow noopener\" target=\"_blank\" onclick=\"_paq.push(['trackEvent', 'affiliate-toolkit Link', 'Link (box, Amazon.de)', ' (Midea PortaSplit: Controlable a trav\u00e9s de Bluetooth Sin PIN)']);\" title=\"Buy now at Amazon.de\" class=\"atkp-button\">Buy now at Amazon*<\/a>\n                                                                                    <span class=\"atkp-priceinfo\">Price incl. VAT., Excl. Shipping<\/span>\n                                    <\/div>\n            <\/div>\n        \n            <\/div>\n<div id=\"netgu-1641154655\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Seg\u00fan \u00e9l, el Midea PortaSplit se puede controlar a trav\u00e9s de Bluetooth sin autenticaci\u00f3n \u2013 desde unos 10 metros. Una actualizaci\u00f3n de firmware est\u00e1 en las obras.<\/p>\n","protected":false},"author":1,"featured_media":1665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[],"tags":[],"class_list":["post-5390","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5390","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/comments?post=5390"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5390\/revisions"}],"predecessor-version":[{"id":5391,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5390\/revisions\/5391"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media\/1665"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media?parent=5390"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/categories?post=5390"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/tags?post=5390"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}