CVE-2016-6544

Опубликовано: 13 июл. 2018

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.

Ссылки

http://www.securityfocus.com/bid/93875
Third Party Advisory
VDB Entry
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
Mitigation
Third Party Advisory
https://www.kb.cert.org/vuls/id/974055
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/93875
Third Party Advisory
VDB Entry
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
Mitigation
Third Party Advisory
https://www.kb.cert.org/vuls/id/974055
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:ieasytec:itrack_easy:-:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01206

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-306

CWE-287

Связанные уязвимости

GHSA-cg57-h35j-g58g