Several Coros smartwatch models have a Bluetooth vulnerability enabling nearby malicious users to access personal data and notifications. The flaw was identified when testing the Coros Watch 3 paired with an Android smartphone. Users can potentially have their devices reset, crash, or lose data during activities. Coros has acknowledged the issues and is set to release software updates for newer models by the end of July. iPhone users remain secure due to iOS's Bluetooth encryption, while Coros recommends pairing devices in non-public settings and force-quitting apps after use.
The security flaws were discovered by a German IT firm when the Coros Watch 3 was paired with an Android smartphone, allowing unauthorized access to private data.
An unauthenticated user within Bluetooth range can control the smartwatch, access private information, read notifications, and send fake alerts to the device.
Coros has acknowledged the Bluetooth vulnerability and plans to roll out updates to secure newer smartwatch models by the end of July.
iPhone users are protected against these vulnerabilities as iOS encrypts Bluetooth connections by default, unlike Android devices.
Collection
[
|
...
]