Perimeter Breached: Hacking a Network-Connected Access Control System
Sam Quinn and Steve Povolny analyze building access control hardware, uncovering vulnerabilities in Mercury controllers that allow remote physical door unlocking.
Summary
The Convergence of Physical and Network Security Perimeters
Enterprise physical access control systems (PACS) increasingly connect directly to IP networks, creating potential bridges between digital vulnerabilities and physical facility access.
Reverse Engineering Mercury Security Access Controllers
Sam Quinn and Steve Povolny audit Mercury EP-series controllers, discovering unauthenticated command execution and hardcoded cryptographic keys in backend daemons.
Remotely Unlocking Doors and Spoofing Badge Scans
The researchers demonstrate weaponizing discovered flaws over the network to instantly trigger door strikes, unlock secured zones, and forge audit logs.
Hardening Guidelines for Corporate Facilities Teams
The presentation provides enterprise defenders with network segmentation blueprints and firmware update practices for physical access infrastructure.
Related talks
Main Stage·42 min
Mark Omo · James Rowley
Reverse engineers electronic gun safes and commercial digital vaults, demonstrating effortless physical and electromagnetic bypasses across leading brands.
Main Stage·40 min
Dennis Giese · braelynn
Security evaluation and hardware attack surface analysis of smart electronic lockers and storage cabinets.
Main Stage·46 min
Rion Carter
Rion Carter reverse engineers low-cost consumer security cameras, uncovering unauthenticated audio injection flaws and remote firmware takeover vectors.