Lucene search
HistoryJul 20, 2022 - 4:15 p.m.
CVE-2022-2199
micodus mv720
gps tracker
web server
reflected cross-site scripting
vulnerability
attacker
control
user
request
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
39.8%
The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could allow an attacker to gain control by tricking a user into making a request.
Affected configurations
Node
micodusmv720_firmwareMatch-
micodusmv720Match-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| micodus | mv720_firmware | - | cpe:2.3:o:micodus:mv720_firmware:-:*:*:*:*:*:*:* |
| micodus | mv720 | - | cpe:2.3:h:micodus:mv720:-:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2022-07-20 16:15:00
cvelist
cvelist
CVE-2022-2199 ICSA-22-200-01 MiCODUS MV720 GPS tracker Cross-site Scripting
2022-07-20 15:24:14
cve
cve
CVE-2022-2199
2022-07-20 16:15:09
ics
ics
MiCODUS MV720 GPS tracker (Update A)
2022-09-20 12:00:00
thn
thn
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
39.8%
Related for NVD:CVE-2022-2199