CVE-2022-2141

MiCODUS MV720 GPS tracker is affected by CVE-2022-2141, an improper authentication flaw that allows SMS-based GPS commands to be executed without authentication. Affected component: the MV720 device and its API/authentication handling. Reported impact includes remote control of tracker functions ...