PT-2019-7050

Name of the Vulnerable Software and Affected Versions Fitbit activity-tracker devices affected versions not specified Description The issue concerns Fitbit activity-tracker devices, such as Charge 2, which transmit Bluetooth Low Energy BLE advertising packets. Despite the TxAdd flag indicating...

CVE-2014-10374: Exposure of Sensitive Information to an Unauthorized Actor

On Fitbit activity-tracker devices, certain addresses never change. According to the popets-2019-0036.pdf document, this leads to "permanent trackability" and "considerable privacy concerns" without a user-accessible anonymization feature. The devices, such as Charge 2, transmit Bluetooth Low...