GPS Tracker Used as Anti-Kidnapping Device Leaks Users Location, Info
ID: 1e256263-cac9-5929-a4d5-4ee530622f2d
STIX ID: report--1e256263-cac9-5929-a4d5-4ee530622f2d
Feed Name: Security Ledger
Threat Score
Rapid7's analysis of the Eview EV-07S GPS tracker (used in Colombia's protection program) identified several serious security and privacy flaws — unauthenticated remote factory reset via SMS, easy enumeration of five-digit user IDs enabling exposure of other users' GPS data, and management-console vulnerabilities that permit access to device configuration and microphone/GPS information — creating high-risk opportunities for attackers to take over trackers or surveil protected individuals.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.