Micodus Mv720 Firmware
5 CVEs affecting Micodus Mv720 Firmware. Latest disclosed: 2022-07-20. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2141 | Critical | 9.8 | 2022-07-20 | SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication. |
CVE-2022-2107 | Critical | 9.8 | 2022-07-20 | The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to… |
CVE-2022-2199 | High | 7.5 | 2022-07-20 | The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain control by tricking a use… |
CVE-2022-34150 | High | 7.1 | 2022-07-20 | The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which a… |
CVE-2022-33944 | Medium | 6.5 | 2022-07-20 | The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,”… |