iTrack

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

iTrack records in CISA KEV

No iTrack vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Itrack Easy 2 records LOW Itrackeasy 2 records MEDIUM

Records

2 records in Itrack Easy · all components

TI-2016-05608 CVE-2016-6544 · GHSA-cg57-h35j-g58g

iTrack Easy's getgps data can be modified without authentication

LOW 39

getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.03306 Published 2018-07-13 No fix listed CWE-306

TI-2016-05607 CVE-2016-6543 · GHSA-pp55-j7w3-7wx3

Improper access control in iTrack Easy

LOW 31

A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data, which can allow unauthenticated parties to track the device.

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.02131 Published 2018-07-13 No fix listed CWE-799

Open these records in search →

Critical	1
High	2
Medium	1
Low	1
No CVSS	0