CS2 Network P2P through 3.x as used in millions of Internet of Things devices suffers from an authentication flaw that allows remote attackers to perform a man-in-the-middle attack as demonstrated by eavesdropping on user video/audio streams capturing credentials and compromising devices.