What is CVE-2016-6541?

CVE-2016-6541 is a high-severity vulnerability in Thetrackr Trackr_bravo, classified under Missing Authentication for Critical Function. CVSS score: 8.8/10. Published 2018-07-06.

How severe is CVE-2016-6541?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Thetrackr Trackr_bravo

CVE-2016-6541

TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to…

Vulnerability class: Broken Authentication

EPSS: 0.011 (61.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Thetrackr Trackr_bravo
Thetrackr Trackr_bravo_firmware
Trackr Bravo Mobile Application — versions 5.1.6, 2.2.5

Weakness classification (CWE)

References

cret@cert.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)
cret@cert.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
cret@cert.org (Third Party Advisory, x_refsource_MISC)
cret@cert.org (US Government Resource, x_refsource_CERT-VN, Third Party Advisory, third-party-advisory)

Frequently asked questions

What is CVE-2016-6541?: CVE-2016-6541 is a high-severity vulnerability in Thetrackr Trackr_bravo, classified under Missing Authentication for Critical Function. CVSS score: 8.8/10. Published 2018-07-06.
How severe is CVE-2016-6541?: High severity. CVSS v3 base score is 8.8 out of 10.