logo

Two students uncovered a flaw that allows to use laundry machines for free

ID: ab400008-dbc9-5e6c-880f-f7d1b7c407fc

STIX ID: report--ab400008-dbc9-5e6c-880f-f7d1b7c407fc

Feed Name: Security Affairs

Threat Score
50/100

Date Published: 2024-05-20

Date Updated: 2026-04-22

Author: Pierluigi Paganini

...
...

Two UC Santa Cruz students discovered a flaw in CSC ServiceWorks' CSC Go API that allows remote commands to over a million internet-connected laundry machines and manipulation of account balances (enabling free laundry). They reported the issue to the vendor and CERT, but the company has not publicly fixed the vulnerability.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.