Description
User names used to access the web management interface are limited to
the device identifier, which is a numerical identifier no more than 10
digits. A malicious actor can enumerate potential targets by
incrementing or decrementing from known identifiers or through
enumerating random digit sequences.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SinoTrack | IOT PC Platform | All versions | — |
Advisories 1
- ICSA-25-160-01 SinoTrack GPS Receiver CISA ICS & IT advisories · Jun 10, 2025