[CVE-2026-9220] Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests bet…

Descripción técnica

Setracker2 Android Companion App com.tgelec.setracker versions 3.1.5 and prior encrypts requests between the watch and its backend with static hardcoded AES keys and initialization vectors. This allows an attacker to decrypt Setracker2 watch traffic.

Puntuación CVSS

Score: 7.5/10 — Severidad: HIGH — Estado NIST: Deferred

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Debilidades (CWE)

CWE-321

Fuente oficial

Publicado en NIST NVD.