{"id":5392,"date":"2026-09-29T22:10:19","date_gmt":"2026-09-29T22:10:19","guid":{"rendered":"https:\/\/netguide.io\/news\/2026\/09\/29\/midea-portasplit-controlable-via-bluetooth-sans-nip\/"},"modified":"2026-09-29T22:10:20","modified_gmt":"2026-09-29T22:10:20","slug":"midea-portasplit-controlable-via-bluetooth-sans-nip","status":"publish","type":"post","link":"https:\/\/netguide.io\/news\/fr\/2026\/09\/29\/midea-portasplit-controlable-via-bluetooth-sans-nip\/","title":{"rendered":"Midea PortaSplit: contr\u00f4lable via Bluetooth sans NIP"},"content":{"rendered":"<div id=\"netgu-2790973950\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p class=\"wp-block-paragraph\"><strong>Selon un rapport de Heise online, le climatiseur mobile Midea PortaSplit peut \u00eatre contr\u00f4l\u00e9 par des tiers via Bluetooth sans aucune authentification. Un attaquant dans la gamme radio peut activer et d\u00e9sactiver l&#8217;appareil, basculer entre le refroidissement et le chauffage, et changer la temp\u00e9rature \u2013 contourner le NIP et l&#8217;appariement de l&#8217;application n\u00e9cessite normalement.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Comment fonctionne le d\u00e9faut<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Le probl\u00e8me r\u00e9side dans le SDK Bluetooth OEM de Midea, qui ne v\u00e9rifie pas un PIN de p\u00e9riph\u00e9rique. Les commandes de contr\u00f4le sont cod\u00e9es par AES, mais les cl\u00e9s correspondantes peuvent \u00eatre calcul\u00e9es \u00e0 partir d&#8217;informations que l&#8217;appareil lui-m\u00eame diffuse sur Bluetooth. Cela permet \u00e0 un attaquant de cr\u00e9er des commandes valides et de reprendre l&#8217;unit\u00e9.<\/p><div id=\"netgu-1955757280\" class=\"netgu-content netgu-entity-placement\"><aside class=\"deals-top deals-top--compact\">\n\n\t\t\t<h3 class=\"deals-top__title\">Top-Deals<\/h3>\n\t\n\t\t\t<ul class=\"deals-top__list\">\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/moon-knight-digital-watch-face-fuer-wear-os-4\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/deal-27-150x150.png\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">MOON KNIGHT Digital Watch Face f\u00fcr Wear OS 4+<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>0.89 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/train-sim-world-7-starter-pack-kostenlos-fuer-ps4-ps5-xbox-pc\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/capsule_616x353-11-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Train Sim World 7: Starter Pack kostenlos f\u00fcr PS4, PS5, Xbox, PC<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/ml2u-watchfaces-fuer-wearos-im-google-play-store-2\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844734_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">ML2U Watchfaces f\u00fcr WearOS im Google Play Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>1.39 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenloses-dlc-bundle-fuer-gears-of-war-e-day-liquid-death-bundle\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844571_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenloses DLC-Bundle f\u00fcr Gears of War E-Day \u2013 Liquid Death Bundle<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenlose-emote-im-clash-royale-store\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/share-image-clashroyale-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenlose Emote im Clash Royale-Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t<\/ul>\n\n\t\t\t\t\t<p class=\"deals-top__more\">\n\t\t\t\t<a href=\"https:\/\/netguide.io\/deals\/\">Alle Deals ansehen \u2192<\/a>\n\t\t\t<\/p>\n\t\t\t<\/aside>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Important: local seulement, pas d&#8217;acc\u00e8s Internet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Pour le contexte : la vuln\u00e9rabilit\u00e9 est limit\u00e9e \u00e0 la plage Bluetooth d&#8217;environ dix m\u00e8tres. La t\u00e9l\u00e9commande sur Internet ou le cloud est explicitement <strong>pas<\/strong> possible. Un attaquant devrait donc se trouver \u00e0 proximit\u00e9 imm\u00e9diate de l&#8217;appareil, par exemple dans l&#8217;appartement voisin ou \u00e0 l&#8217;ext\u00e9rieur de la fen\u00eatre.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">D\u00e9couverte et r\u00e9ponse de Midea<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Un d\u00e9nonciateur anonyme a signal\u00e9 le probl\u00e8me \u00e0 la mi-ao\u00fbt 2026; l&#8217;\u00e9quipe \u00e9ditoriale l&#8217;a confirm\u00e9 \u00e0 l&#8217;aide d&#8217;une application de preuve de concept et de scripts Python. Midea a d&#8217;abord \u00e9t\u00e9 d\u00e9daigneuse mais a plus tard reconnu le d\u00e9faut et, selon l&#8217;entreprise, travaille sur une mise \u00e0 jour du firmware OTA actuellement dans sa phase de test et de validation. Selon le rapport, tous les appareils PortaSplit semblent \u00eatre affect\u00e9s; aucun CVE n&#8217;a \u00e9t\u00e9 affect\u00e9 jusqu&#8217;\u00e0 pr\u00e9sent.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Ce que les propri\u00e9taires touch\u00e9s peuvent faire maintenant<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Jusqu&#8217;\u00e0 ce qu&#8217;un patch soit disponible, la fonction Bluetooth peut \u00eatre d\u00e9sactiv\u00e9e \u2013 bien que cela limite les fonctionnalit\u00e9s intelligentes. Si vous utilisez le PortaSplit jour apr\u00e8s jour, vous trouverez plus sur l&#8217;op\u00e9ration et les soins dans notre <a href=\"https:\/\/netguide.io\/de\/blog\/midea-portasplit-faq-tipps\/\" rel=\"noopener\" target=\"_blank\">FAQ Midea PortaSplit<\/a>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Source: <a href=\"https:\/\/www.heise.de\/hintergrund\/Mobile-Klimaanlage-Midea-PortaSplit-laesst-sich-von-jedermann-fernsteuern-11417163.html\" rel=\"noopener\" target=\"_blank\">Mise en ligne<\/a>.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Le Midea PortaSplit sur Amazon:<\/em><\/p>\n\n\n\n<div class=\"atkp-container atkp-box-box  atkp-template-box\">\n                        <div class=\"atkp-box atkp-clearfix atkp-smallbox \"\n                 style=\"\">\n                <div class=\"atkp-predicateheadline atkp-predicate-highlight\">\n                    <span><\/span><\/div>\n                <div class=\"atkp-thumb\">\n                                            <img decoding=\"async\" class=\"atkp-image\" src=\"https:\/\/netguide.io\/news\/?a_image=1&amp;pid=1960&amp;lid=0&amp;sid=1164&amp;name=aHR0cHM6Ly9tLm1lZGlhLWFtYXpvbi5jb20vaW1hZ2VzL0kvMzFFZjQ2dmxQNUwuX1NMMTYwXy5qcGc%3D&amp;key=5d39fd174f8429aa95289bddb103462ea27a44bfe7dbeafc50c72279eaebf833\"\n                             alt=\"Midea Portasplit Mobile W&auml;rmepumpe, Klimaanlage, K&uuml;hlen A++\/Heizen A+, 12000 BTU 3, 5kW, f&uuml;r R&auml;ume bis zu 42 m&sup2; \/ 105 m&sup3;, nur 39 dB(A) im Silent-Modus\"\/>\n                                                                    <div class=\"atkp-rating\"><span class=\"atkp-star atkp-star-0 atkp-star-00\" title=\"0.00 of 5 stars\"><\/span><\/div>\n                                                                                    <div class=\"atkp-reviews\">Show customer reviews<\/div>\n                                                                                        <\/div>\n                <div class=\"atkp-content\">\n                                            <a class=\"atkp-title\" href=\"https:\/\/www.amazon.de\/dp\/B0D3PP64JS?tag=netguideio-21&linkCode=ogi&th=1&psc=1\" rel=\"sponsored nofollow noopener\" target=\"_blank\" onclick=\"_paq.push(['trackEvent', 'affiliate-toolkit Link', 'Link (box, Amazon.de)', ' (Midea PortaSplit: contr\u00f4lable via Bluetooth sans NIP)']);\" title=\"Buy now at Amazon.de\">Midea Portasplit Mobile W&auml;rmepumpe, Klimaanlage, K&uuml;hlen A++\/Heizen A+, 12000 BTU 3, 5kW, f&uuml;r R&auml;ume bis zu 42 m&sup2; \/ 105 m&sup3;, nur 39 dB(A) im Silent-Modus*<\/a>\n                                        <div class=\"atkp-author\">by Midea<\/div>\n                                            <div class=\"atkp-shoplogo\">Amazon.de<\/div>\n                                    <\/div>\n                <div class=\"atkp-bottom\">\n                                            <span class=\"atkp-price atkp-listprice\"><\/span>\n                                                                <span class=\"atkp-price atkp-savedamount\"><\/span>\n                                                                <span class=\"atkp-price atkp-saleprice\">\n                            &nbsp;Price not available\n                                                            <span class=\"atkp_price atkp-baseprice\"><\/span>\n                                                    <\/span>\n                                                                <a href=\"https:\/\/www.amazon.de\/dp\/B0D3PP64JS?tag=netguideio-21&linkCode=ogi&th=1&psc=1\" rel=\"sponsored nofollow noopener\" target=\"_blank\" onclick=\"_paq.push(['trackEvent', 'affiliate-toolkit Link', 'Link (box, Amazon.de)', ' (Midea PortaSplit: contr\u00f4lable via Bluetooth sans NIP)']);\" title=\"Buy now at Amazon.de\" class=\"atkp-button\">Buy now at Amazon*<\/a>\n                                                                                    <span class=\"atkp-priceinfo\">Price incl. VAT., Excl. Shipping<\/span>\n                                    <\/div>\n            <\/div>\n        \n            <\/div>\n<div id=\"netgu-2709547955\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Selon Heise, le Midea PortaSplit peut \u00eatre contr\u00f4l\u00e9 via Bluetooth sans authentification \u2013 \u00e0 partir d&#8217;environ 10 m\u00e8tres. Une mise \u00e0 jour firmware est dans les travaux.<\/p>\n","protected":false},"author":1,"featured_media":1665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[],"tags":[],"class_list":["post-5392","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5392","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/comments?post=5392"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5392\/revisions"}],"predecessor-version":[{"id":5393,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5392\/revisions\/5393"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media\/1665"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media?parent=5392"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/categories?post=5392"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/tags?post=5392"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}