How severe is CVE-2001-1006?

CVE-2001-1006 has a CVSS 2.0 base score of 5.0, rated medium severity.

Is CVE-2001-1006 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-1006?

CVE-2001-1006 affects Starfish Truesync Desktop. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2001-1006?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2001-1006 published?

CVE-2001-1006 was published on 2001-08-31 and last updated on 2026-06-16.

CVE-2001-1006

CVE-2001-1006 is a medium-severity vulnerability in Starfish Truesync Desktop with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 5.0)
EPSS exploit prediction: 1% (62nd percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Starfish Truesync Desktop
Published: 2001-08-31
Last modified: 2026-06-16

Description

Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.

Frequently asked questions

What is CVE-2001-1006?: Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to restrict access, which allows an attacker to read the files using a different application.
How severe is CVE-2001-1006?: CVE-2001-1006 has a CVSS 2.0 base score of 5.0, rated medium severity.
Is CVE-2001-1006 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 1% (62nd percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-1006?: CVE-2001-1006 affects Starfish Truesync Desktop. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2001-1006?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2001-1006 published?: CVE-2001-1006 was published on 2001-08-31 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:a:starfish:truesync_desktop:2.0b:*:*:*:*:*:*:*

More vulnerabilities in Starfish Truesync Desktop

CVE-2001-1005 — High (CVSS 7.5): Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a…
CVE-2001-1007 — Medium (CVSS 5.0): Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a…

All CVEs affecting Starfish Truesync Desktop →