Back to list
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Sprint / Verizon MiFi CSRF+CSS Gives up GPS info to attacker
Jan 15 2010 04:12PM
Adam Baldwin (adam_baldwin ngenuity-is com)
The MiFi by Novatel Wireless (re-branded and sold by multiple vendors
such as Sprint and Verizon) is a mobile wifi hotspot. The mifi also has
a built in GPS to provide location based searching.
Turns out that the web interface to this little device has a lot going
on that can be exploited, from gai...
[ more ]
Copyright 2010, SecurityFocus