Vulnerability Details CVE-2022-2107
The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-coded master password. This may allow an attacker to send SMS commands directly to the GPS tracker as if they were coming from the GPS owner’s mobile number.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 50.8%
CVSS Severity
CVSS v3 Score 9.8
References
Products affected by CVE-2022-2107
-
cpe:2.3:h:micodus:mv720:-
-
cpe:2.3:o:micodus:mv720_firmware:-