PT-2018-4943

CVE-2016-6542

·

Published

2018-07-13

·

Updated

2019-10-09

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions iTrack (affected versions not specified)
Description The issue concerns the iTrack device, where the tracking ID number, also referred to as "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-20: Improper Input Validation
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Related identifiers
CVE-2016-6542
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com