VU#251927: CalAmp LMU-3030 devices may not authenticate SMS interface

Vulnerability Note VU#251927 CalAmp LMU-3030 devices may not authenticate SMS interface Original Release date: 08 Jun 2017 | Last revised: 14 Jun 2017 Overview OBD-II devices are used to provide telematics information for managers of fleets of vehicles. One type of device, manufactured by CalAmp, has an SMS (text message) interface. We have found multiple deployments where no password was configured for this interface by the integrator / reseller. Companies using the CalAmp hardware should be aware that they need…