What is mean by IoT attack surface?
The IoT attack surface is the all expected security vulnerabilities in IoT devices and connected software and infrastructure in a given network, be it local or the entire Internet.
Insecure web interface insufficient authentication/authorization. The main attack surface areas for any IoT device as below