Vulnerability Details CVE-2022-33944
The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 37.0%
CVSS Severity
CVSS v3 Score 6.5
References
Products affected by CVE-2022-33944
-
cpe:2.3:h:micodus:mv720:-
-
cpe:2.3:o:micodus:mv720_firmware:-