TH
Vendor
Thetrackr
5
CVEs
0
On KEV
0
New 30D
Products
TB8.8
Trackr Bravo Firmware
Thetrackr
3 CVEs0 on KEV0 new
TF7.1
Trackr Firmware
Thetrackr
2 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2020-13425 | TF Trackr Firmware Thetrackr | 7.1 | May 23 | TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted |
| CVE-2016-6541 | TB Trackr Bravo Firmware Thetrackr | 8.8 | Jul 6 | TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes |
| CVE-2016-6540 | TB Trackr Bravo Firmware Thetrackr | 6.5 | Jul 6 | Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which… |
| CVE-2016-6539 | TF Trackr Firmware Thetrackr | 3.5 | Jul 6 | The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse |
| CVE-2016-6538 | TB Trackr Bravo Firmware Thetrackr | 8.8 | Jul 6 | The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file |