Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2022-2199

ICSA-22-200-01 MiCODUS MV720 GPS tracker Cross-site Scripting

The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain control by tricking a user into making a request.

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Micodus
Products
Mv720 Mv720 Firmware
CVE-2022-34150

ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key

The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which accept arbitrary device IDs without further verification.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Micodus
Products
Mv720 Mv720 Firmware
CVE-2022-2141

ICSA-22-200-01 MiCODUS MV720 GPS tracker Improper Authentication

SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Micodus
Products
Mv720 Mv720 Firmware
CVE-2022-33944

ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key

The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Micodus
Products
Mv720 Mv720 Firmware
CVE-2022-2107

ICSA-22-200-01 MiCODUS MV720 GPS tracker Use of Hard-coded Credentials

The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to send SMS commands directly to the GPS tracker as if they were coming from the GPS owner’s mobile number.

CVSS 3.1 · 9.8 Critical EPSS 1.3% KEV · Not listed
Vendors
Micodus
Products
Mv720 Mv720 Firmware