CVE-2016-6544CWE-306

iTrack Easy's getgps data can be modified without authentication

published July 13, 2018

CVSS
—
EPSS
3%
Percentile
88.4
In the wild
Unconfirmed
What it is

getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03306 · 88.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2018-07-13T20:00Z
EPSS history
Timeline
  • 13 JUL 20:00Z
    iTrack Easy's getgps data can be modified without authentication
    cvelistv5