Advisories · Technology

TrackR Bravo Mobile Application.

Every CVE that names TrackR Bravo Mobile Application among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2016-6541 CVE record

TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes
- TrackR Bravo Mobile Application
- Authentication bypass
Not analysed yet 6 Jul 2018
CVE-2016-6540 CVE record

TrackR Bravo is missing authentication for the cloud service and allows querying or sending of GPS data from unauthenticated users
- TrackR Bravo Mobile Application
- Authentication bypass
Not analysed yet 6 Jul 2018
CVE-2016-6539 CVE record

TrackR Bravo MAC address can be exposed in close proximity and used to obtain the device ID
- TrackR Bravo Mobile Application
- Information disclosure
Not analysed yet 6 Jul 2018
CVE-2016-6538 CVE record

TrackR Bravo mobile application stores account passwords in cleartext
- TrackR Bravo Mobile Application
- CWE-313
Not analysed yet 6 Jul 2018