CVE-2021-32927

CVE-2021-32927 affects all versions of Uffizio GPS Tracker and is described as a Cross-Site Scripting vulnerability (CWE-79) caused by improper neutralization of input during web page generation. The issue enables an attacker to inject client-side JavaScript into multiple instances, potentially e...

CVE-2021-32929

CVE-2021-32929 affects all versions of Uffizio GPS Tracker and is described as a Cross-site Request Forgery (CSRF) vulnerability that lets an attacker perform unintended actions on behalf of an authenticated user. The Red Hat/ICS/CVE ecosystem and CVE records corroborate that this vulnerability e...

CVE-2020-17485

CVE-2020-17485 affects Uffizio’s GPS Tracker (all versions) and describes a Remote Code Execution via the web server by uploading and executing a web/reverse shell. The vulnerability path allows an attacker to upload a dangerous file and then run commands, browse system files, and access local re...

CVE-2020-17483

Summary: CVE-2020-17483 affects Uffizio's GPS Tracker (all versions) due to an improper access control (CWE-284) that allows disclosure of sensitive information for all connected devices. Access via port 9000 returns a JSON payload detailing deployed devices, implying potential exposure over the ...

CVE-2020-17484

CVE-2020-17484 : Uffizio’s GPS Tracker (all versions) has an Open Redirect vulnerability. An attacker can craft a URL within the application to redirect victims to an arbitrary external domain due to insufficient input/URL validation. Impact is described as redirecting to an external site; exploi...