CVE-2016-6542 The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device

2018-07-1320:00:00

CWE-200

certcc

www.cve.org

5.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.5%

JSON

The iTrack device tracking ID number, also called “LosserID” in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device’s BLE MAC address.

CNA Affected

[
  {
    "product": "Easy",
    "vendor": "iTrack",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  }
]