title: iTrack Easy's getgps data can be modified without authentication
description: getgps data in iTrack Easy can be modified without authentication by setting the data using the parametercmd:setothergps. This vulnerability can be exploited to alter the GPS data of a lost device.
problem types: CWE-306: Missing Authentication for Critical Function
affected:
{
product: Easy
vendor: iTrack
versions:
status: unknown, version: N/A
}