CVEvulnerability

CVE-2016-6542

3.7 LOW Published 2018-07-13 Modified 2026-06-17 Official page ↗

Status: Modified
Published: 2018-07-13
Last modified: 2026-06-17
Assigner: [email protected]
CVSS 3.0 ([email protected]): 3.7 LOW — CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected]): 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
Weaknesses: CWE-20, CWE-200

Description

The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.

Affected configurations

• ieasytec itrackeasy

Weakness · CWE (2)

CWE-20 Improper Input Validation weakness
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness

References

http://www.securityfocus.com/bid/93875 Third Party Advisory, VDB Entry
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ Mitigation
https://www.kb.cert.org/vuls/id/974055 Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/93875 Third Party Advisory, VDB Entry
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/ Mitigation
https://www.kb.cert.org/vuls/id/974055 Third Party Advisory, US Government Resource

CVE-2016-6542

Description

Affected configurations

Related

Weakness · CWE (2)

References