CVE-2017-5239

Published: Mar 27, 2017Modified: May 13, 2026

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle (MitM) listener.

Affected (1)

Products: Eviewgps: Ev 07s Gps Tracker Firmware

1 product

Ev 07s Gps Tracker Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Eviewgps Ev 07s Gps Tracker Firmware	All versions

Running on/with	Platform Versions
Eviewgps Ev 07s Gps Tracker	All versions

Related CWEs

Inadequate Encryption Strength

The product stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

References (4)

http://www.securityfocus.com/bid/97194

Source: cve@rapid7.com

https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities

Source: cve@rapid7.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/97194

Source: af854a3a-2127-422b-91ae-364da2661108

https://community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.