Security flaws in GPS trackers can be abused to cut off fuel to vehicles, CISA warns
A handful of vulnerabilities, some critical, in MiCODUS GPS tracker devices could allow criminals to disrupt fleet operations and spy on routes, or even remotely control or cut off fuel to vehicles, according to CISA. And there's no fixes for these security flaws.
"Successful exploitation of these vulnerabilities could allow an attacker control over any MV720 GPS tracker, granting access to location, routes, fuel cutoff commands, and the disarming of various features ," the US government agencyAs of Monday, the gadget manufacturer, based in China, had not provided any updates or patches to fix the flaws, CISA added. The agency also recommended fleet owners and operators take"defensive measures" to minimize risk.
"After reasonably exhausting all options to reach MiCODUS, BitSight and CISA determined that these vulnerabilities warrant public disclosure," according to a BitSight report [About 1.5 million consumers and organizations use the GPS trackers, the researchers said. This spans 169 countries and includes government agencies, military, law enforcement, aerospace, energy, engineering, manufacturing and shipping companies, they added.
For example, an attacker could exploit some of the vulnerabilities to cut fuel to an entire fleet of commercial or emergency vehicles. Or, the attacker could leverage GPS information to monitor and abruptly stop vehicles on dangerous highways. Attackers could choose to surreptitiously track individuals or demand ransom payments to return disabled vehicles to working condition.
Canada Latest News, Canada Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
American Airlines reserves 50 flying taxisMaking down payment to Vertical Aerospace for VX4 electric VTOL fleet
Read more »
Is It Time To Revisit The Trans-Caspian Pipeline Plan? | OilPrice.comRussia’s invasion of Ukraine has transformed global geopolitics and has greatly increased the importance and significance of energy security, particularly in Europe.
Read more »
Linus Torvalds says Linux kernel has addressed ‘Retbleed’But tidying things up has contributed to a one week delay on the version 5.19 release
Read more »
Microsoft launches simulator to train drone AI systemsIt hopes the platform will let firms train drones and air taxis virtually without risking crashes.
Read more »
Cold water shock warning as Scotland heats upSafety experts say the contrast between air and water temperature increases the risk to swimmers.
Read more »
Cold water shock warning as Scotland heats upSafety experts say the contrast between air and water temperature increases the risk to swimmers.
Read more »