CVE-2021-35952: Fastrack Reflex 2.0 Firmware

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

fastrack Reflex 2.0 W307S_REFLEX_v90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017.

Affected products

• Fastrack Reflex 2.0 Firmware: version 90.89 only

Published 2022-12-26. Last modified 2026-06-17.