important · Bluetooth
A nearby stranger can take over disconnected HeyCyan-compatible smart glasses and access their media.
Affects
HeyCyan-compatible low-cost camera and AI smart glasses and their companion-phone ecosystem, sold under multiple retailer brands.
Commissioned testing of two retail pairs found that an unpaired phone could connect without a password while the owner's phone was disconnected, retrieve media and create photos or recordings.
Detail and 4 sources
The exact models, firmware versions and full population of affected rebrands were not published.
Sources
ResearchUltra-cheap smart glasses leaving Australians' personal data exposed to hackers - ABC NewsResearchApp Connection | HeyCyan - Smart Glasses Companion AppResearchHeyCyan - 智能眼镜伴侣应用Code / PoCGitHub - ebowwa/HeyCyanSmartGlassesSDK: Cross-platform SDK for HeyCyan smart glasses - Control photo/video capture, audio recording, and AI image generation via Bluetooth LE on iOS and Android · GitHub