Vulnerabilities (CVE)

Filtered by vendor Thetrackr Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-13425 1 Thetrackr 2 Trackr, Trackr Firmware 2020-05-26 6.8 MEDIUM 7.1 HIGH
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
CVE-2016-6538 1 Thetrackr 2 Trackr Bravo, Trackr Bravo Firmware 2019-10-09 3.3 LOW 8.8 HIGH
The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.
CVE-2016-6541 1 Thetrackr 2 Trackr Bravo, Trackr Bravo Firmware 2019-10-09 5.8 MEDIUM 8.8 HIGH
TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.