CVE-2016-6541 | BDVDB-2026-103539 Detail

TrackRBravo Mobile Application

Description#

TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. Updated apps, version 5.1.6 for iOS and 2.2.5 for Android, have been released by the vendor to address the vulnerabilities in CVE-2016-6538, CVE-2016-6539, CVE-2016-6540 and CVE-2016-6541.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-306 Missing Authentication for Critical Function

References#

http://www.securityfocus.com/bid/93874
https://www.kb.cert.org/vuls/id/TNOY-AF3KCZ
https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
https://www.kb.cert.org/vuls/id/617567

Exploit#

No public exploit known

History#

Version 12018-07-06Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.