This coroos smartwatch flw lets malicious users view data, notifications

Several Coros Smartwatch Models Have a Bluetooth Vulnerability that Allows a MALICIOUS user with the wearable to View to View Personal Data, Read All Smartphone Notifications, Or Eveen Reset the device. The Security Flaws was discovered by a German it firm, when the coros watch 3 was paired with an Android smartphone. The company has accepted the issue and say that it is working on rolling out updates to resolve the security flaws, and the first updates will roll out to newer models by the End of July.

Coros Responds to Security Flaws Affecting Multiple Smartwatch Models

A blog post by Syss GMBH, the firm that discovered the flaws affecting the coros pace 3, provides a detailed explanation of the bluetooth security flaw affecting the Smartwatch. It allows an unauthinous user who was with a coros watch to take control of an unpatched wearable, access private information on the device, even “send” send “send” fake notifications to the smartwatch.

Injecting notifications on a coros pace 3
Photo Credit: Syss GMBH

As long as the attacker is within bluetooth range (Around 10m for Most Devices), they would be able to access all data on a user’s coros account on an android handset. They would also be able to spy on a user’s smartphone notifications, which are received and displayed on the smartwatch.

A MALICUS User would also be able to modify the configuration of the smartwatch, factory reset it (in the middle of a workout), cause it to crash, or causing data losss dogs doging Running Running Activity.

The firm found that all of the security flaws men be exploited when coros smartwatches are connected to some android phones. However, iPhone users are protected as ios encrypts the Bluetooth Connection by default.

Coros published a support article that Acknowledged the issue, and said that users should pair their device to their android handset in a “non-public setting”. Users should also force -quit the coros app after using it, according to the company.

Software Fixes for this Security Flaw will roll out to the pace 3, pace pro, apex 2, apex 2 pro, vertix 2, vertix 2s, and dura by the end of july. Meanwhile, The Coros Pace 2, APEX (42mm, 46mm) m ad bd vertix 1 will also be updated “shortly after”, but there’s no word on these Fixes will be released to the public.