Lucene search
IcscertCVELIST:CVE-2022-2141HistoryJul 20, 2022 - 3:24 p.m.
CVE-2022-2141 ICSA-22-200-01 MiCODUS MV720 GPS tracker Improper Authentication
2022-07-2015:24:21
CWE-287
icscert
www.cve.org
8
micodus mv720
improper authentication
sms-based commands
gps tracker
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
57.0%
SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.
CNA Affected
[
{
"product": "MV720",
"vendor": "MiCODUS",
"versions": [
{
"status": "affected",
"version": "All versions"
}
]
}
]Related
cve
cve
CVE-2022-2141
2022-07-20 16:15:08
nvd
nvd
CVE-2022-2141
2022-07-20 16:15:08
prion
prion
Authentication flaw
2022-07-20 16:15:00
trellix
trellix
The Bug Report – July 2022 Edition
2022-08-03 00:00:00
The Bug Report – July 2022 Edition
2022-08-03 00:00:00
malwarebytes
malwarebytes
Vulnerabilities in GPS tracker could have “life-threatening” implications
2022-07-21 09:57:08
ics
ics
MiCODUS MV720 GPS tracker (Update A)
2022-09-20 12:00:00
thn
thn
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.8
Confidence
High
EPSS
0.002
Percentile
57.0%
Related for CVELIST:CVE-2022-2141