CVE-2025-51643

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...

CVE-2025-51643

Meitrack T366G-L GPS Tracker devices contain an SPI flash chip Winbond 25Q64JVSIQ that is accessible without authentication or tamper protection. An attacker with physical access to the device can use a standard SPI programmer to extract the firmware using flashrom. This results in exposure of...

CVE-2025-51643

The Meitrack T366G-L GPS Tracker (confirmed firmware T366L_Y24H131V039 ) is vulnerable because its Winbond 25Q64JVSIQ SPI flash chip lacks authentication and tamper protection. An attacker with physical access can use a standard SPI programmer and flashrom to extract the firmware, leading to the ...