{"id":5396,"date":"2026-09-29T22:10:37","date_gmt":"2026-09-29T22:10:37","guid":{"rendered":"https:\/\/netguide.io\/news\/2026\/09\/29\/midea-portasplit-controllabile-tramite-bluetooth-senza-pin\/"},"modified":"2026-09-29T22:10:37","modified_gmt":"2026-09-29T22:10:37","slug":"midea-portasplit-controllabile-tramite-bluetooth-senza-pin","status":"publish","type":"post","link":"https:\/\/netguide.io\/news\/it\/2026\/09\/29\/midea-portasplit-controllabile-tramite-bluetooth-senza-pin\/","title":{"rendered":"Midea PortaSplit: Controllabile tramite Bluetooth senza PIN"},"content":{"rendered":"<div id=\"netgu-2535522861\" class=\"netgu-before-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"3494115342\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>\n<p class=\"wp-block-paragraph\"><strong>Secondo un rapporto di heise online, il condizionatore d&#8217;aria mobile Midea PortaSplit pu\u00f2 essere controllato da terzi tramite Bluetooth senza alcuna autenticazione. Un aggressore all&#8217;interno della gamma radio pu\u00f2 attivare e disattivare l&#8217;unit\u00e0, attivare e disattivare il raffreddamento e il riscaldamento, e cambiare la temperatura \u2013 bypassando il PIN e abbinando l&#8217;app normalmente richiede.<\/strong><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Come funziona il difetto<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Il problema si trova nell&#8217;OEM SDK Bluetooth di Midea, che non verifica un PIN dispositivo. I comandi di controllo sono crittografati AES, ma le chiavi corrispondenti possono essere calcolate da informazioni che il dispositivo stesso trasmette su Bluetooth. Questo consente a un artigiano attaccante comandi validi e prendere il controllo dell&#8217;unit\u00e0.<\/p><div id=\"netgu-833655461\" class=\"netgu-content netgu-entity-placement\"><aside class=\"deals-top deals-top--compact\">\n\n\t\t\t<h3 class=\"deals-top__title\">Top-Deals<\/h3>\n\t\n\t\t\t<ul class=\"deals-top__list\">\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/moon-knight-digital-watch-face-fuer-wear-os-4\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/deal-27-150x150.png\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">MOON KNIGHT Digital Watch Face f\u00fcr Wear OS 4+<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>0.89 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/train-sim-world-7-starter-pack-kostenlos-fuer-ps4-ps5-xbox-pc\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/capsule_616x353-11-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Train Sim World 7: Starter Pack kostenlos f\u00fcr PS4, PS5, Xbox, PC<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t55\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/ml2u-watchfaces-fuer-wearos-im-google-play-store-2\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844734_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">ML2U Watchfaces f\u00fcr WearOS im Google Play Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<s>1.39 \u20ac<\/s>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-discount\">-100%<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenloses-dlc-bundle-fuer-gears-of-war-e-day-liquid-death-bundle\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/2844571_1-150x150.webp\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenloses DLC-Bundle f\u00fcr Gears of War E-Day \u2013 Liquid Death Bundle<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t\t\t<li class=\"deals-top__item\">\n\t\t\t\t\t<a class=\"deals-top__link\" href=\"https:\/\/netguide.io\/deals\/de\/deals\/kostenlose-emote-im-clash-royale-store\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<img class=\"deals-top__image\" src=\"https:\/\/netguide.io\/news\/wp-content\/uploads\/sites\/15\/2026\/09\/share-image-clashroyale-150x150.jpg\" alt=\"\" width=\"52\" height=\"52\" loading=\"lazy\" \/>\n\t\t\t\t\t\t\n\t\t\t\t\t\t<span class=\"deals-top__body\">\n\t\t\t\t\t\t\t<span class=\"deals-top__name\">Kostenlose Emote im Clash Royale-Store<\/span>\n\n\t\t\t\t\t\t\t<span class=\"deals-top__meta\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"deals-top__price\">Gratis<\/span>\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t<\/span>\n\n\t\t\t\t\t\t<span class=\"deals-top__temperature\">\n\t\t\t\t\t\t\t54\u00b0\n\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t\t<\/ul>\n\n\t\t\t\t\t<p class=\"deals-top__more\">\n\t\t\t\t<a href=\"https:\/\/netguide.io\/deals\/\">Alle Deals ansehen \u2192<\/a>\n\t\t\t<\/p>\n\t\t\t<\/aside>\n<\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Importante: solo locale, nessun accesso a internet<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Per contesto: la vulnerabilit\u00e0 \u00e8 limitata alla gamma Bluetooth di circa dieci metri. Il controllo remoto su Internet o il cloud \u00e8 esplicitamente <strong>non<\/strong> possibile. Un aggressore dovrebbe quindi essere nelle immediate vicinanze del dispositivo \u2013 ad esempio nell&#8217;appartamento vicino o fuori dalla finestra.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Discovery e la risposta di Midea<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Un whistleblower anonimo ha riferito il problema a heise a met\u00e0 agosto 2026; la redazione lo ha confermato utilizzando un&#8217;app di proof-of-concept e script Python. Midea \u00e8 stata inizialmente licenziata, ma in seguito ha riconosciuto il difetto e, secondo l&#8217;azienda, sta lavorando ad un aggiornamento del firmware OTA attualmente nella sua fase di test e validazione. Secondo il rapporto, tutti i dispositivi PortaSplit sembrano essere colpiti; nessun CVE \u00e8 stato assegnato finora.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Cosa possono fare i proprietari interessati<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Fino a quando non \u00e8 disponibile una patch, la funzione Bluetooth pu\u00f2 essere disabilitata \u2013 anche se questo limita le funzioni intelligenti. Se si utilizza la PortaSplit giorno per giorno, troverete di pi\u00f9 sul funzionamento e la cura nel nostro <a href=\"https:\/\/netguide.io\/de\/blog\/midea-portasplit-faq-tipps\/\" rel=\"noopener\" target=\"_blank\">Midea PortaSplit FAQ<\/a>.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Fonte: <a href=\"https:\/\/www.heise.de\/hintergrund\/Mobile-Klimaanlage-Midea-PortaSplit-laesst-sich-von-jedermann-fernsteuern-11417163.html\" rel=\"noopener\" target=\"_blank\">heise online<\/a>.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>Il Midea PortaSplit su Amazon:<\/em><\/p>\n\n\n\n<div class=\"atkp-container atkp-box-box  atkp-template-box\">\n                        <div class=\"atkp-box atkp-clearfix atkp-smallbox \"\n                 style=\"\">\n                <div class=\"atkp-predicateheadline atkp-predicate-highlight\">\n                    <span><\/span><\/div>\n                <div class=\"atkp-thumb\">\n                                            <img decoding=\"async\" class=\"atkp-image\" src=\"https:\/\/netguide.io\/news\/?a_image=1&amp;pid=1960&amp;lid=0&amp;sid=1164&amp;name=aHR0cHM6Ly9tLm1lZGlhLWFtYXpvbi5jb20vaW1hZ2VzL0kvMzFFZjQ2dmxQNUwuX1NMMTYwXy5qcGc%3D&amp;key=5d39fd174f8429aa95289bddb103462ea27a44bfe7dbeafc50c72279eaebf833\"\n                             alt=\"Midea Portasplit Mobile W&auml;rmepumpe, Klimaanlage, K&uuml;hlen A++\/Heizen A+, 12000 BTU 3, 5kW, f&uuml;r R&auml;ume bis zu 42 m&sup2; \/ 105 m&sup3;, nur 39 dB(A) im Silent-Modus\"\/>\n                                                                    <div class=\"atkp-rating\"><span class=\"atkp-star atkp-star-0 atkp-star-00\" title=\"0.00 of 5 stars\"><\/span><\/div>\n                                                                                    <div class=\"atkp-reviews\">Show customer reviews<\/div>\n                                                                                        <\/div>\n                <div class=\"atkp-content\">\n                                            <a class=\"atkp-title\" href=\"https:\/\/www.amazon.de\/dp\/B0D3PP64JS?tag=netguideio-21&linkCode=ogi&th=1&psc=1\" rel=\"sponsored nofollow noopener\" target=\"_blank\" onclick=\"_paq.push(['trackEvent', 'affiliate-toolkit Link', 'Link (box, Amazon.de)', ' (Midea PortaSplit: Controllabile tramite Bluetooth senza PIN)']);\" title=\"Buy now at Amazon.de\">Midea Portasplit Mobile W&auml;rmepumpe, Klimaanlage, K&uuml;hlen A++\/Heizen A+, 12000 BTU 3, 5kW, f&uuml;r R&auml;ume bis zu 42 m&sup2; \/ 105 m&sup3;, nur 39 dB(A) im Silent-Modus*<\/a>\n                                        <div class=\"atkp-author\">by Midea<\/div>\n                                            <div class=\"atkp-shoplogo\">Amazon.de<\/div>\n                                    <\/div>\n                <div class=\"atkp-bottom\">\n                                            <span class=\"atkp-price atkp-listprice\"><\/span>\n                                                                <span class=\"atkp-price atkp-savedamount\"><\/span>\n                                                                <span class=\"atkp-price atkp-saleprice\">\n                            &nbsp;Price not available\n                                                            <span class=\"atkp_price atkp-baseprice\"><\/span>\n                                                    <\/span>\n                                                                <a href=\"https:\/\/www.amazon.de\/dp\/B0D3PP64JS?tag=netguideio-21&linkCode=ogi&th=1&psc=1\" rel=\"sponsored nofollow noopener\" target=\"_blank\" onclick=\"_paq.push(['trackEvent', 'affiliate-toolkit Link', 'Link (box, Amazon.de)', ' (Midea PortaSplit: Controllabile tramite Bluetooth senza PIN)']);\" title=\"Buy now at Amazon.de\" class=\"atkp-button\">Buy now at Amazon*<\/a>\n                                                                                    <span class=\"atkp-priceinfo\">Price incl. VAT., Excl. Shipping<\/span>\n                                    <\/div>\n            <\/div>\n        \n            <\/div>\n<div id=\"netgu-2824202489\" class=\"netgu-after-content netgu-entity-placement\"><script async src=\"\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-6258556257245998\" crossorigin=\"anonymous\"><\/script><ins class=\"adsbygoogle\" style=\"display:block;\" data-ad-client=\"ca-pub-6258556257245998\" \ndata-ad-slot=\"4559785002\" \ndata-ad-format=\"auto\"><\/ins>\n<script> \n(adsbygoogle = window.adsbygoogle || []).push({}); \n<\/script>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Secondo il rumore, la Midea PortaSplit pu\u00f2 essere controllata tramite Bluetooth senza autenticazione \u2013 da circa 10 metri. Un aggiornamento del firmware \u00e8 nelle opere.<\/p>\n","protected":false},"author":1,"featured_media":1665,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[],"tags":[],"class_list":["post-5396","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"brizy_media":[],"_links":{"self":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5396","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/comments?post=5396"}],"version-history":[{"count":1,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5396\/revisions"}],"predecessor-version":[{"id":5397,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/posts\/5396\/revisions\/5397"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media\/1665"}],"wp:attachment":[{"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/media?parent=5396"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/categories?post=5396"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/netguide.io\/news\/wp-json\/wp\/v2\/tags?post=5396"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}