Header banner
Revain logoHome Page
Joseph Marshall photo
1 Level
803 Review
72 Karma

Review on BB ZB1 Network Gateway Interface Control by Joseph Marshall

Revainrating 3 out of 5

Works well but has a HUGE security flaw.

OK, that's what's wrong with this device. The sparse documentation says this is such an "autoconfiguration", and it really is. It will set itself up and work fine with their website, communicate with outlets and send data to the cloud, but they made a BIG ASSUMPTION about this device. That means you will NEVER put it on the public internet. :-O because if so, and it's a HUGE WARNING TO EVERYONE THERE, it has a WIDE OPEN WEB SERVER and EVERYONE (and I mean EVERYONE!) that has an IP address or just "stumbles upon it" (i.e. port 80 scan .) You can just click on this thing in any browser, change your IP address and ruin everything. Luckily, they can't get the passcode from the bottom of the device through this webpage, but they can disable all of your power monitoring settings simply by setting them to a static IP address (which you don't know right now). I've reported the HUGE security risk this poses to Furman Tech Support and so far they seem ambivalent about this. I got NO REPLY from them. We essentially had to set up an IP filter to filter port 80 so that only our IP address ranges could access it. Maybe they will fix it in a future firmware update. let's hope

Pros
  • Power distributor
Cons
  • Something's wrong