Midea PortaSplit Mobile AC Unit Vulnerable to Unauthorized Remote Control via Bluetooth

The Midea PortaSplit mobile air conditioning unit can be remotely controlled or turned off by unauthorized individuals via Bluetooth. The issue allows neighbors or nearby users to access and manipulate the device without authentication. Midea initially does not classify this as a security vulnerability. No specific technical details, such as firmware versions or CVE identifiers, were provided in the report. The impact includes unauthorized control over the device’s functions, posing potential privacy and operational risks.