Lucene search

K

TrackR Security Vulnerabilities

cve
cve

CVE-2016-6539

The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by being in close proximity to the Bluetooth device, effectively exposing the device ID. The ID can be used to track devices. Updated apps,...

3.5CVSS

6AI Score

0.002EPSS

2018-07-06 09:29 PM
22
cve
cve

CVE-2016-6540

Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered as described in CVE-2016-6539. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been.....

6.5CVSS

6.3AI Score

0.002EPSS

2018-07-06 09:29 PM
18
cve
cve

CVE-2016-6538

The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540....

8.8CVSS

5.9AI Score

0.002EPSS

2018-07-06 09:29 PM
20
cve
cve

CVE-2016-6541

TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538,...

8.8CVSS

5.8AI Score

0.002EPSS

2018-07-06 09:29 PM
16
cve
cve

CVE-2016-1000136

Reflected XSS in wordpress plugin heat-trackr...

6.1CVSS

5.9AI Score

0.001EPSS

2016-10-10 08:59 PM
25