Sherbrooke and Taranenko of UC Santa Cruz found a flaw in the CSC Serviceworks app called CSC Go, where it has a flawed API allowing a custom script to authorize free laundry cycles, add credits to the account, and bypass its safety checks, potentially making its internet-connected washing machines a fire hazard.
