Researcher prints 'PWNED!' on hundreds of GPS watches' maps due to unfixed API

[InfoSec News <alerts () infosecnews org>]

https://www.zdnet.com/article/researcher-prints-pwned-on-hundreds-of-gps-watches-maps-due-to-unfixed-api/

By Catalin Cimpanu
Zero Day
ZDNet News
April 2, 2019

A German security researcher has printed the word "PWNED!" on the tracking maps 
of hundreds of GPS watches after the watch vendor ignored vulnerability reports 
for more than a year, leaving thousands of GPS-tracking watches --some of which 
are used by children and the elderly-- open to attackers.

Speaking at the Troopers 2019 security conference that was held in Heidelberg, 
Germany, at the end of March, security researcher Christopher Bleckmann-Dreher 
presented a series of vulnerabilities impacting over 20 models of GPS watches 
manufactured by Austrian company Vidimensio.

The watch models all share a common backend API, which works as an intermediary 
and storage point between the GPS watches and associated mobile apps.

[...]



--
Subscribe to InfoSec News
https://www.infosecnews.org/subscribe-to-infosec-news/
https://twitter.com/infosecnews_