Arm, disarm payload with wrong password

maragelis / ParadoxRs232toMqtt

esp8266, serial bus to mqtt for Paradox alarm systems

MIT License

80 stars 22 forks source link

Arm, disarm payload with wrong password #49

Open chrisgsauto opened 5 years ago

chrisgsauto commented 5 years ago

Hi Panagiotis, i realized by mistake that sending in the topic "paradoxdCTL/in" payloads with wrong password, the paradox alarm system is arming and disarming. As example i'm having as acount password 1234 and i'm sending from my HA payload_disarm: '{"password":"aaaaaaa","Command":"disarm","Subcommand":"0"}' and my system goes to disarmed. These happens when i send a command one time with the suitable code (1234), after that any commands with any wrong code is controlling my paradox system.

chrisgsauto commented 5 years ago

I am running 2.2.3

maragelis commented 5 years ago

That is correct after 30 seconds the program will logoff from the panel and it will not allow other requests