Support Us — Your donation helps us keep running

Goal: 1000 CNY，Raised: 1000 CNY

100.0%
Donate Now

Easy — Vulnerabilities & Security Advisories 5

All 5 CVE vulnerabilities found in Easy, with AI-generated Chinese analysis, references, and POCs.

Vendor: iTrack

CVE IDTitleCVSSSeverityPaused
CVE-2016-6542 The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device CWE-200 5.3 -2018-07-13
CVE-2016-6543 A captured MAC/device ID of an iTrack Easy can be registered under multiple user accounts allowing access to getgps GPS data CWE-799 7.5 -2018-07-13
CVE-2016-6544 iTrack Easy's getgps data can be modified without authentication CWE-306 7.5 -2018-07-13
CVE-2016-6545 iTrack Easy does not use session cookies to maintain sessions and POSTs the users password over HTTPS for each request CWE-613 9.8 -2018-07-13
CVE-2016-6546 iTrack Easy mobile application stores the user password in base-64 encoding/cleartext CWE-313 8.4 -2018-07-13

All 5 known CVE vulnerabilities affecting Easy with full Chinese analysis, references, and POCs where available.