eviewgps records

3 published records for vendor eviewgps.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2017-5237No exploit	Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a faeviewgps · ev-07s gps tracker firmware · CWE-287 Pre-auth Auth bypass Denial of service	High7.5	—	2.0%	Mar 27, 2017
30Monitor	CVE-2017-5239No exploit	Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Evieeviewgps · ev-07s gps tracker firmware · CWE-326 Pre-auth Weak crypto	High7.5	—	0.5%	Mar 27, 2017
21Monitor	CVE-2017-5238No exploit	Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one variaeviewgps · ev-07s gps tracker firmware · CWE-119 Pre-auth Memory safety	Medium5.3	—	0.9%	Mar 27, 2017

CVE-2017-5237
31Monitor
Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a fa
HighCVSS 7.5No exploitEPSS 2%
eviewgps · ev-07s gps tracker firmwareMar 27, 2017
CVE-2017-5239
30Monitor
Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Evie
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
eviewgps · ev-07s gps tracker firmwareMar 27, 2017
CVE-2017-5238
21Monitor
Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one varia
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Memory safety
eviewgps · ev-07s gps tracker firmwareMar 27, 2017