VULNERABILITY INTELLIGENCE

CVE-2016-6543

CVSS score5.9 MEDIUM

EPSS probability2.13%

CISA KEVNot currently listed

Published2018-07-13

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.

Weakness classification

CWE-284: Improper Access Control
CWE-799: Improper Control of Interaction Frequency

Primary references

cret@cert.org — Third Party Advisory, VDB Entry
cret@cert.org — Mitigation, Third Party Advisory
cret@cert.org — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource