Vibratissimo Panty Buster

The sex toys of the “Vibratissimo” product line and their cloud platform, both manufactured and operated by the German company Amor Gummiwaren GmbH, were affected by severe security vulnerabilities. The information we present is not only relevant from a technological perspective, but also from a data protection and privacy perspective.

This report documents the findings of a security assessment targeting the Vibratissimo Panty Buster. The project was carried out by Cure53 in October 2018 after being commissioned by The Mozilla Foundation. The Vibratissimo Panty Buster is a vibrator that can be controlled remotely by an application. As the device is intended to be operated remotely by a partner, the application offers multiple features. This includes searching for other users, maintaining a list of friends, a video chat, a message board, and a feature to create and share image. It is vital to note that the Vibratissimo Panty Buster device made news in February 2018 due to being affected by security vulnerabilities. The problems reported in the press concerned compromised privacy of the users’ devices.