Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2025-5485

SinoTrack GPS Receiver Weak Authentication

Description

User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or through enumerating random digit sequences.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SinoTrack IOT PC Platform

Default version status: unaffected

  • All versionsaffected

References