Trackr Bravo Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2018-07-06	CVE-2016-6541	Improper Authentication vulnerability in Thetrackr Trackr Bravo Firmware TrackR Bravo device allows unauthenticated pairing, which enables unauthenticated connected applications to write to various device attributes. low complexity thetrackr CWE-287	8.8
2018-07-06	CVE-2016-6540	Information Exposure vulnerability in Thetrackr Trackr Bravo Firmware Unauthenticated access to the cloud-based service maintained by TrackR Bravo is allowed for querying or sending GPS data for any Trackr device by using the tracker ID number which can be discovered as described in CVE-2016-6539. low complexity thetrackr CWE-200	6.5
2018-07-06	CVE-2016-6538	Information Exposure vulnerability in Thetrackr Trackr Bravo Firmware The TrackR Bravo mobile app stores the account password used to authenticate to the cloud API in cleartext in the cache.db file. low complexity thetrackr CWE-200	8.8