CVE-2020-13425
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which...
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- Low
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
- Record
CVE-2020-13425- CVSS 3.1
- 7.1 High
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - CVSS 2.0
- 6.8 Medium
AV:A/AC:L/Au:N/C:N/I:P/A:C - Weakness
- CWE-862
- Updated
- 2026-11-02
CVE List No score
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
- Record
CVE-2020-13425- Updated
- 2026-11-02
EUVDEUVD-2020-5679 No score
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
- Record
EUVD-2020-5679- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8hf2-8wmv-gjp5 No score
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which...
TrackR devices through 2020-05-06 allow attackers to trigger the Beep (aka alarm) feature, which will eventually cause a denial of service when battery capacity is exhausted.
- Record
GHSA-8hf2-8wmv-gjp5- Updated
- 2026-11-02
OSVCLSA-2022-1665428733 No score
Fix CVE(s): CVE-2020-13435, CVE-2020-13425
- SECURITY UPDATE: segfault in sqlite3ExprCodeTarget
- debian/patches/CVE-2020-13435.patch: tries to prevent a recurrence of problems.
- CVE-2020-13425
- Record
CLSA-2022-1665428733- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
lemonTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3.11.0-1ubuntu1.5+tuxcare.els2 | 3.11.0-1ubuntu1.5+tuxcare.els2 |
libsqlite3-0TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3.11.0-1ubuntu1.5+tuxcare.els2 | 3.11.0-1ubuntu1.5+tuxcare.els2 |
libsqlite3-devTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3.11.0-1ubuntu1.5+tuxcare.els2 | 3.11.0-1ubuntu1.5+tuxcare.els2 |
libsqlite3-tclTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3.11.0-1ubuntu1.5+tuxcare.els2 | 3.11.0-1ubuntu1.5+tuxcare.els2 |
sqlite3TuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3.11.0-1ubuntu1.5+tuxcare.els2 | 3.11.0-1ubuntu1.5+tuxcare.els2 |
sqlite3-docTuxCare:Ubuntu:16.04 From an advisory covering 2 CVEs |
before 3.11.0-1ubuntu1.5+tuxcare.els2 | 3.11.0-1ubuntu1.5+tuxcare.els2 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-13425 is a high vulnerability (CVSS 7.1) in Thetrackr Trackr Firmware, published May 23, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.56%, the 47th percentile. No source names a fixed version.