iTrack Easy Device Tracking Vulnerability

The iTrack Easy is a versatile Bluetooth device. The iTrack EasyMAC/device ID can be registered for use by multiple users, allowing a remote attacker to exploit the vulnerability by submitting a special request to access getgps GPS data to track the device...

iTrack Easy Plaintext Password Acquisition Vulnerability

The iTrack Easy is a versatile Bluetooth device. The iTrack Easy uses base64 encoding to store account passwords. A remote attacker could use this vulnerability to submit a special request to obtain passwords in plaintext...

iTrack Easy contains multiple vulnerabilities

Overview iTrack Easy contains multiple vulnerabilities including sensitive information exposure and missing authentication. Description CWE-200: Information Exposure - CVE-2016-6542The iTrack device tracking ID number is the device's BLE MAC address. It can be obtained by being in range of the...