Lucene search
HistoryJul 20, 2022 - 4:15 p.m.
CVE-2022-2141
cve-2022-2141
gps tracker
micodus
authentication
security vulnerability
nvd
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.1%
SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.
Affected configurations
Node
micodusmv720Match-
micodusmv720_firmwareMatch-
| CPE | Name | Operator | Version |
|---|---|---|---|
| micodus:mv720_firmware | micodus mv720 firmware | eq | - |
CNA Affected
[
{
"product": "MV720",
"vendor": "MiCODUS",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Social References
More
Related
nvd
nvd
CVE-2022-2141
2022-07-20 16:15:08
prion
prion
Authentication flaw
2022-07-20 16:15:00
cvelist
cvelist
trellix
trellix
The Bug Report – July 2022 Edition
2022-08-03 00:00:00
The Bug Report – July 2022 Edition
2022-08-03 00:00:00
ics
ics
MiCODUS MV720 GPS tracker (Update A)
2022-09-20 12:00:00
thn
thn
malwarebytes
malwarebytes
Vulnerabilities in GPS tracker could have “life-threatening” implications
2022-07-21 09:57:08
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.1%
Related for CVE-2022-2141