CVE-2022-2141

Summary

SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.

Affected Software

Weaknesses

• CWE-287: CWE-287 Improper Authentication

Workarounds

As of July 18th, 2022, MiCODUS has not provided updates or patches to mitigate these vulnerabilities. CISA will update the corresponding ICSA to reflect any patches, updates, or mitigation information provided by MiCODUS in the future.

ADP Enrichment

CVE Program Container

Additional References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-200-01

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-22-200-01

• ←Previous
• Next→