CyberSecBulletin

SinoTrack vulnerabilities

We track 2 vulnerabilities in SinoTrack products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 12, 2025.

2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score

Latest SinoTrack vulnerabilities

  • 8.6 High severity

    IOT PC Platform: Observable Response Discrepancy

    CVE-2025-5485SinoTrack

    User names used to access the web management interface are limited to the device identifier, which is a numerical identifier no more than 10 digits. A malicious actor can enumerate potential targets by incrementing or decrementing from known identifiers or thr

  • 8.3 High severity

    IOT PC Platform: Weak Authentication

    CVE-2025-5484SinoTrack

    A username and password are required to authenticate to the central SinoTrack device management interface. The username for all devices is an identifier printed on the receiver. The default password is well-known and common to all devices. Modification of the