CVE-2020-13425: Missing Authorization

TrackR devices through 2020-05-06 allow attackers to trigger the Beep aka alarm feature, which will eventually cause a denial of service when battery capacity is exhausted...