3 matches found
CVE-2016-6544 iTrack Easy's getgps data can be modified without authentication
getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device...
CVE-2016-6543 A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data
A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device...
PT-2018-4945
Name of the Vulnerable Software and Affected Versions iTrack Easy affected versions not specified Description The issue allows modification of getgps data without authentication by utilizing the cmd:setothergps parameter. This can be exploited to alter the GPS data of a lost device. Recommendatio...