3 matches found
CVE-2022-34150
The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which accept arbitrary device IDs without further verification...
7.1CVSS0.00662EPSS
SaveExploits0References1
CVE-2022-34150
CVE-2022-34150 affects the MiCODUS MV720 GPS tracker Web server and is an authenticated insecure direct object reference vulnerability on endpoints/parameters for device IDs, enabling an attacker with basic access to manipulate device IDs without further verification (authorization bypass). Publi...
7.1CVSS6.4AI score0.00662EPSS
SaveExploits0References1Affected Software1
20