Lenovo Watch X was riddled with security bugs, researcher says

guest · Feb 11, 2019

Lenovo Watch X was riddled with security bugs, researcher says
February 11, 2019
https://techcrunch.com/2019/02/11/lenovo-watch-x-security-bugs/

Lenovo’s Watch X was widely panned as “absolutely terrible.” As it turns out, so was its security.
The low-end $50 smartwatch was one of Lenovo’s cheapest smartwatches. Available only for the China market, anyone who wants one has to buy one directly from the mainland.

Because the smartwatch wasn’t using any encryption to send data from the app to the server, Yalon said he was able to see his registered email address and password sent in plain text, as well as data about how he was using the watch, like how many steps he was taking.

“The entire API was unencrypted,” said Yalon in an email to TechCrunch. “All data was transferred in plain-text.”
The API that helps power the watch was easily abused, he found, allowing him to reset anyone’s password simply by knowing a person’s username. That could’ve given him access to anyone’s account, he said.
He found that the Bluetooth-enabled smartwatch could also be manipulated from nearby, by sending crafted Bluetooth requests.
Click to expand...

Log in or Sign up

Lenovo Watch X was riddled with security bugs, researcher says

guest Guest

Log in or Sign up

Lenovo Watch X was riddled with security bugs, researcher says

guest Guest

Useful Searches