CVE-2021-35951: Fastrack Reflex 2.0 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows an Unauthenticated Remote attacker to send a malicious firmware update via BLE and brick the device.

Affected products

• Fastrack Reflex 2.0 Firmware: version 90.89 only

Published 2022-12-26. Last modified 2026-06-17.