A story of WiFi secrets, UART lockdowns and a damaged flash memory chip

Researchers analyzed the Eufy HomeBase 2 security system and discovered vulnerabilities including a predictable WiFi credential generation algorithm, a UART lockdown that could be bypassed with a backdoored U-Boot image, and filesystem limitations in the recovery image. The analysis required physically extracting firmware from a soldered flash memory chip using improvised hardware techniques, with the team ultimately damaging part of the memory during the process.