Trackr Bravo Mobile Application
4 CVEs affecting Trackr Bravo Mobile Application. Latest disclosed: 2018-07-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2016-6541 | High | 8.8 | 2018-07-06 | TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, v… |
CVE-2016-6538 | High | 8.8 | 2018-07-06 | The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. Updated apps, version 5.1.6 fo… |
CVE-2016-6540 | Medium | 6.5 | 2018-07-06 | Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tra… |
CVE-2016-6539 | Low | 3.5 | 2018-07-06 | The Trackr device ID is constructed of a manufacturer identifier of four zeroes followed by the BLE MAC address in reverse. The MAC address can be obtained by… |