CVE-2016-6544 iTrack Easy's getgps data can be modified without authentication

2018-07-1320:00:00

CWE-306

certcc

www.cve.org

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.4%

JSON

getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.

CNA Affected

[
  {
    "product": "Easy",
    "vendor": "iTrack",
    "versions": [
      {
        "status": "unknown",
        "version": "N/A"
      }
    ]
  }
]