Any IoT Device Can Be Hacked, Even Grills

Researchers at Bishop Fox discovered multiple vulnerabilities in Traeger grills using the D2 Wi‑Fi controller that could allow remote actors to query device details and issue commands (for example, shutting down a grill or changing the temperature up to 500°F) due to insufficient authorization in the registration API. Exploitation requires the grill's unique 48‑bit identifier (obtainable during pairing or by scanning a QR code), which limits attacker scope, and Traeger has mitigated the issue via automatic firmware updates.