Security News > 2022 > July > Critical Vulnerabilities in GPS Trackers

An assessment from security firm BitSight found six vulnerabilities in the Micodus MV720, a GPS tracker that sells for about $20 and is widely available.

The researchers who performed the assessment believe the same critical vulnerabilities are present in other Micodus tracker models.

BitSight discovered what it said were six "Severe" vulnerabilities in the device that allow for a host of possible attacks.

Other vulnerabilities include a flawed authentication mechanism in the mobile app that can allow attackers to access the hardcoded key for locking down the trackers and the ability to use a custom IP address that makes it possible for hackers to monitor and control all communications to and from the device.

These are computers and computer vulnerabilities, but because the computers are attached to cars, the vulnerabilities become potentially life-threatening.

These vulnerabilities could impact access to a vehicle fuel supply, vehicle control, or allow locational surveillance of vehicles in which the device is installed.

News URL

https://www.schneier.com/blog/archives/2022/07/critical-vulnerabilities-in-gps-trackers.html