thetrackr kayıtları
thetrackr üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-306 Missing Authentication for Critical Function2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-313 Cleartext Storage in a File or on Disk1
- CWE-862 Missing Authorization1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2016-6541İstismar yok | TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributesthetrackr · trackr bravo firmware · CWE-306 | Yüksek8,8 | — | %1,0 | 6 Tem 2018 |
35İzleyin | CVE-2016-6538İstismar yok | TrackR Bravo mobile application stores account passwords in cleartextthetrackr · trackr bravo firmware · CWE-313 | Yüksek8,8 | — | %1,0 | 6 Tem 2018 |
28İzleyin | CVE-2020-13425İstismar yok | TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service wthetrackr · trackr firmware · CWE-862 | Yüksek7,1 | — | %0,5 | 23 May 2020 |
26İzleyin | CVE-2016-6540İstismar yok | TrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated usersthetrackr · trackr bravo firmware · CWE-306 | Orta6,5 | — | %0,9 | 6 Tem 2018 |
14İzleyin | CVE-2016-6539İstismar yok | TrackR Bravo MAC address can be exposed in close proximity and used to obtain the device IDthetrackr · trackr firmware · CWE-200 | Düşük3,5 | — | %1,2 | 6 Tem 2018 |
- CVE-2016-654135İzleyin
TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes
YüksekCVSS 8,8İstismar yokEPSS %1thetrackr · trackr bravo firmware6 Tem 2018
- CVE-2016-653835İzleyin
TrackR Bravo mobile application stores account passwords in cleartext
YüksekCVSS 8,8İstismar yokEPSS %1thetrackr · trackr bravo firmware6 Tem 2018
- CVE-2020-1342528İzleyin
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service w
YüksekCVSS 7,1İstismar yokEPSS %0thetrackr · trackr firmware23 May 2020
- CVE-2016-654026İzleyin
TrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated users
OrtaCVSS 6,5İstismar yokEPSS %0thetrackr · trackr bravo firmware6 Tem 2018
- CVE-2016-653914İzleyin
TrackR Bravo MAC address can be exposed in close proximity and used to obtain the device ID
DüşükCVSS 3,5İstismar yokEPSS %1thetrackr · trackr firmware6 Tem 2018