Security Flaw Reveals Location of Thousands of Electric Vehicles, Phone numbers
Australian company Vmoto sells its battery powered scooters and motorcycles under the brand name Supersoco. Most of its vehicles feature a GPS tracker with a vehicle interface that sends data to the Supersoco app via the company's servers using a cellular data connection. Among other information, the app displays the vehicle's mileage, its position, the status of its traction batteries, and the phone number of the associated user's account. Now, during an audit of the Supersoco app, IT security firm "VTRUST" has discovered a serious vulnerability in the company's application interface and the...
Source: heise.de