CVE-2016-6542CWE-200

The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device

published July 13, 2018

CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01748 · 77.5th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2018-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device
    cvelistv5