# crafty

Published articles for crafty.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Hacking a Herb Vaporizer to Set Its Temperature Limit From 190C to 6553.5C Remotely

DevFeed: [Hacking a Herb Vaporizer to Set Its Temperature Limit From 190C to 6553.5C Remotely](<https://devfeed.tech/articles/hacking-a-herb-vaporizer-to-set-its-temperature-limit-from-190c-to-6553-5c-remotely-41254.md>)

Original publisher: [Read original article](<https://www.evilsocket.net/2017/08/25/Mini-Post-Hacking-a-Herb-Vaporizer-using-GNU-Linux-and-BLE-raw-commands/>)

Author: Simone Margaritelli

Published: 2017-08-25T01:10:53Z

Content type: opinion

Language: en

Sources: [evilsocket](<https://devfeed.tech/sources/evilsocket.md>)

Topics: [Hacking](<https://devfeed.tech/topics/hacking.md>), [Bluetooth](<https://devfeed.tech/topics/bluetooth.md>), [Security](<https://devfeed.tech/topics/security.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>)

Tags: [ble](<https://devfeed.tech/tags/ble.md>), [bluetooth](<https://devfeed.tech/tags/bluetooth.md>), [bluetooth-low-energy](<https://devfeed.tech/tags/bluetooth-low-energy.md>), [btle](<https://devfeed.tech/tags/btle.md>), [crafty](<https://devfeed.tech/tags/crafty.md>), [crafty-vaporizer](<https://devfeed.tech/tags/crafty-vaporizer.md>), [cybersecurity](<https://devfeed.tech/tags/cybersecurity.md>), [embedded-devices](<https://devfeed.tech/tags/embedded-devices.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [hacking](<https://devfeed.tech/tags/hacking.md>), [iot-security](<https://devfeed.tech/tags/iot-security.md>), [linux](<https://devfeed.tech/tags/linux.md>), [low-energy](<https://devfeed.tech/tags/low-energy.md>), [no-authentication](<https://devfeed.tech/tags/no-authentication.md>), [protocol-reversing](<https://devfeed.tech/tags/protocol-reversing.md>), [responsible-disclosure](<https://devfeed.tech/tags/responsible-disclosure.md>), [security](<https://devfeed.tech/tags/security.md>), [terminal](<https://devfeed.tech/tags/terminal.md>), [vaporizer](<https://devfeed.tech/tags/vaporizer.md>)

### AI overview

The article describes reverse engineering the Crafty vaporizer's mobile application and Bluetooth Low Energy interface. It reports that device descriptors could be read and written without authentication and that the temperature value was stored as two bytes, allowing a remote attempt to change the limit from 190°C to 6553.5°C. The author did not test the modified setting.

### Source excerpt

Tonight my brain decided, instead of sleeping (why even bother trying, right?), to start a new short adventure in the Bluetooth Low Energy world. I'm a happy Crafty vaporizer owner and as I discovered by chance, I can access it using my laptop.