Approved changes feed: RSS · Atom

cpe:2.3:o:eviewgps:ev-07s_gps_tracker_firmware:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorEviewgps (894daad8-53db-54e9-bd06-717b7d2acd58)
ProductEv 07S Gps Tracker Firmware (dc03d917-1b95-53f4-abe6-033e27b3cc38)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-5239 vulnerable 2026-06-08 05:09:39.384526 Details available
Due to a lack of standard encryption when transmitting sensitive information over the internet to a centralized monitoring service, the Eview EV-07S GPS Tracker discloses personally identifying information, such as GPS data and IMEI numbers, to any man-in-the-middle (MitM) listener.
Published: 2017-03-27T21:00:00.000Z
Updated: 2024-08-05T14:55:35.799Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5238 vulnerable 2026-06-08 05:09:39.384175 Details available
Due to a lack of bounds checking, several input configuration fields for the Eview EV-07S GPS Tracker will overflow data stored in one variable to another, overwriting the data of another field.
Published: 2017-03-27T21:00:00.000Z
Updated: 2024-08-05T14:55:35.783Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-5237 vulnerable 2026-06-08 05:09:39.383240 Details available
Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"
Published: 2017-03-27T21:00:00.000Z
Updated: 2024-08-05T14:55:35.682Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.