Description
Herowatch Mini developed by About Time Technologies has a Missing Authentication vulnerability. Unauthenticated remote attackers can connect to the affected device's ADB service and obtain an ADB shell, thereby accessing device resources or performing related operations.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| About Time Technologies | Herowatch Mini | all | — |
References
- https://www.twcert.org.tw/tw/cp-132-11355-341da-1.html third-party-advisory
- https://www.twcert.org.tw/en/cp-139-11356-8292a-2.html third-party-advisory