Two security vulnerabilities have been disclosed in SinoTrack GPS devices that could be exploited to control certain remote functions on connected vehicles and even track their locations.
« Successful exploitation of these vulnerabilities could allow an attacker to access device profiles without authorization through the common web management interface, » the U.S. Cybersecurity and Infrastructure