Companion apps often hold device credentials and talk directly to devices on the local network. Weak app security undermines otherwise sound device controls.
Apply mobile app security practices to companion apps: strong authentication, secure credential storage, encrypted transport, and account lockout.
The same feature written the risky way, then with the fix applied.
How this risk has ranked in each OWASP release.
2014Latest
#07iot07-2014 Insecure Mobile Interface
