CVE-2016-6544

CVE-2016-6544: iTrack Easy's getgps data can be modified without authentication

Weakness CWE-306 · Missing auth

Published July 13, 2018

Last update August 6, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.

Key dates

02Disclosure timeline

July 13, 2018 CVE published

August 6, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2016-6544 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/306.html

Related vulnerabilities

04Related CVE

CVE-2025-5876 Lucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authentication CVE-2026-35546 Anviz Products Missing Authentication for Critical Function CVE-2025-13870 Unauthorized access and subscription vulnerability in Boards CVE-2026-5724 Missing Authentication on Streaming gRPC Replication Endpoint CVE-2019-3917