# Hacking and Security

**URL:** <https://forums.digi.com/t/hacking-and-security/407>\
**Category:** XBee - Zigbee\
**Created:** [March 14, 2011, 11:16pm UTC](https://forums.digi.com/t/hacking-and-security/407 "2011-03-14T23:16:21Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![jnickoloff](https://avatars.discourse-cdn.com/v4/letter/j/c2a13f/32.png) [@jnickoloff](https://forums.digi.com/u/jnickoloff)\
**Post date:** [March 14, 2011, 11:16pm UTC](https://forums.digi.com/t/hacking-and-security/407/1 "2011-03-14T23:16:21Z")

</div>

I have a Digi ConnectPort X2. One of our customers is worried that a malicious hacker may be able to access their wired network by compromising the ConnectPort wirelessly.

We are running a simple routing Python application on the ConnectPort which I have already evaluated as being secure.

I have these questions:

1. Can a hacker compromise the ConnectPort through the XBee?

2. Is it possible to remote manage the ConnectPort from the XBee? Can you access the web and telnet servers on the ConnectPort through the XBee?

Thanks,

Jake

---

<div class="post-metadata">

**Author:** ![shahrj1988](https://avatars.discourse-cdn.com/v4/letter/s/c4cdca/32.png) [@shahrj1988](https://forums.digi.com/u/shahrj1988)\
**Post date:** [March 22, 2011, 4:30am UTC](https://forums.digi.com/t/hacking-and-security/407/2 "2011-03-22T04:30:29Z")

</div>

XBee is operated either ZigBee, Digi mesh or 802.15.4 protocol. As this protocols are not working on TCP stack, and telnet access through the XBee over the air is not supported. The XBee is also having feature of 128 bit AES encryption. That can be provided by KY AT command. Even if 64 bit PAN ID should be same for all the devices communicating in the network. Even the coordinator also provides the operational PAN ID to its child nodes, so, if another PAN network with the same PAN ID is running in the range, even though the network works safely, without interfering eachother.

---

<div class="post-metadata">

**Author:** ![DenzChoe](https://avatars.discourse-cdn.com/v4/letter/d/53a042/32.png) [@DenzChoe](https://forums.digi.com/u/DenzChoe)\
**Post date:** [April 13, 2011, 10:33am UTC](https://forums.digi.com/t/hacking-and-security/407/3 "2011-04-13T10:33:34Z")

</div>

@jnickoloff  
something to expose you on Zigbee’s theoretical Security vulnerabilities and theoretical methods of hacking into a Zigbee network that was recently presented on ShmooCon 2011.

[http://www.youtube.com/watch?v=SvCbIOwblqM](http://www.youtube.com/watch?v=SvCbIOwblqM)

You have no reason to worry though if you are running on SE profile… 🙂