writeups.xyz / Hacking into the worldwide Jacuzzi SmartTub network

Submitter : c2a

Date: 20 June 2022

Bounty : undisclosed

Vulnerabilities :

• SPA
• Android
• JWT
• Privilege Escalation
• Mass Assignment

Programs :

• Jacuzzi Group
• SmartTub

Authors :

• Eaton Z. (@XeEaton)

Link :
https://eaton-works.com/2022/06/20/hacking-into-the-worldwide-jacuzzi-smarttub-network/