ieasytec kayıtları
ieasytec üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-306 Missing Authentication for Critical Function1
- CWE-613 Insufficient Session Expiration1
- CWE-799 Improper Control of Interaction Frequency1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2016-6545İstismar yok | iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each requestieasytec · itrackeasy · CWE-613 | Kritik9,8 | — | %3,0 | 13 Tem 2018 |
31İzleyin | CVE-2016-6544İstismar yok | iTrack Easy's getgps data can be modified without authenticationieasytec · itrack easy · CWE-306 | Yüksek7,5 | — | %3,3 | 13 Tem 2018 |
24İzleyin | CVE-2016-6543İstismar yok | A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS dataieasytec · itrack easy · CWE-799 | Orta5,9 | — | %2,1 | 13 Tem 2018 |
15İzleyin | CVE-2016-6542İstismar yok | The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the deviceieasytec · itrackeasy · CWE-200 | Düşük3,7 | — | %1,7 | 13 Tem 2018 |
- CVE-2016-654540Planlayın
iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request
KritikCVSS 9,8İstismar yokEPSS %3ieasytec · itrackeasy13 Tem 2018
- CVE-2016-654431İzleyin
iTrack Easy's getgps data can be modified without authentication
YüksekCVSS 7,5İstismar yokEPSS %3ieasytec · itrack easy13 Tem 2018
- CVE-2016-654324İzleyin
A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data
OrtaCVSS 5,9İstismar yokEPSS %2ieasytec · itrack easy13 Tem 2018
- CVE-2016-654215İzleyin
The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device
DüşükCVSS 3,7İstismar yokEPSS %1ieasytec · itrackeasy13 Tem 2018