CVE-2017-5239

CVE-2017-5239 describes a critical vulnerability in the Eview EV-07S GPS Tracker and its firmware, where sensitive GPS and IMEI data are transmitted without standard encryption to a centralized monitoring service. This lack of encryption allows an unauthenticated attacker to intercept personally identifying information via a man-in-the-middle attack. Rated with a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low complexity, leading to a high impact on confidentiality. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.