What’s Vulnerable › Vulnerabilities

CVE-2016-6542: The MAC address/device tracking ID of an iTrack Easy can be obtained within range of the device

• Severity: low (CVSS 3.7 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-07-13 · updated 2026-06-17
• Weakness: CWE-200

Description

The iTrack device tracking ID number, also called "LosserID" in the web API, can be obtained by being in the range of an iTrack device. The tracker ID is the device's BLE MAC address.

Affected products

• Ieasytec Itrackeasy: all versions

References

• http://www.securityfocus.com/bid/93875
• https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
• https://www.kb.cert.org/vuls/id/974055
• http://www.securityfocus.com/bid/93875
• https://blog.rapid7.com/2016/10/25/multiple-bluetooth-low-energy-ble-tracker-vulnerabilities/
• https://www.kb.cert.org/vuls/id/974055

Get alerted when CVE-2016-6542 or the next vulnerability affects your stack