UCSC students reveal security flaw in CSC ServiceWorks' laundry machines' app, enabling balance manipulation and free usage.
UCSC students discover security flaw in CSC ServiceWorks' internet-connected laundry machines. A vulnerability in the app's API allows users to manipulate balances and run machines for free. The company, which operates over a million machines in the US, Canada, and Europe, was informed of the issue in January but has not responded. The students have now publicly disclosed the flaw.
May 20, 2024
6 Articles