CVE-2016-6543
EUVD-2016-746413.07.2018, 20:29
A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| ieasytec | itrack_easy | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-799 - Improper Control of Interaction FrequencyThe software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
References