CVE-2016-6543
13.07.2018, 20:29
A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.Enginsight
| Vendor | Product | Version |
|---|---|---|
| ieasytec | itrack_easy | - |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-799 - Improper Control of Interaction FrequencyThe software does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
- CWE-284 - Improper Access ControlThe software does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
References