Companion apps often hold device credentials and talk directly to devices on the local network. Weak app security undermines otherwise sound device controls.
Apply mobile app security practices to companion apps: strong authentication, secure credential storage, encrypted transport, and account lockout.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
Rank by release (taller is higher)
2022Latest
#07iot07 Insufficient Device Management and Monitoring
No change since 20182018
#07iot07 Insecure Data Transfer and Storage
No change since 20142014
#07iot07-2014 Insecure Mobile Interface
