high7.5
CVE-2017-5239
Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracke…
Impact
Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle (MitM) listener.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Eviewgps | Ev-07s Gps Tracker Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97194
- https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities
- http://www.securityfocus.com/bid/97194
- https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities