Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2012-2562

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.

CVSS 2.0 · 7.6 High EPSS 2.2% KEV · Not listed
Vendors
Google Xelex
Products
Android Mobiletrack
CVE-2012-2567

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.

CVSS 2.0 · 2.6 Low EPSS 1.4% KEV · Not listed
Vendors
Google Xelex
Products
Android Mobiletrack