Table of Contents
No luck to bypass anything from the outside it seems. So my next step was to start messing with the actual firmware on the device itself. Thinking maybe I could alter the firmware to connect to a different website instead.
The Windows application has an option to update the firmware so this was my first entry point to acquire the firmware. However when sniffing all the traffic from the application, I noticed that every service regarding updating the device’s firmware, was already taken down. So no way for me to get the firmware binaries from ICY’s website.
However, as this application has ways to interact with the device, it could be at least interesting to see how it does this and see if there is anything there which can be useful. So I fired up Wireshark with the USBPcap driver, monitored all USB traffic and noticed interesting things. The thermostat presents itself as an HID device to Windows. Then with some basic commands the application can do some basic things as updating the schedule, the device date and time and the settings. And of course updating the firmware as well. Maybe there are some hidden commands in the software as well?