GCVE-110-CERTCC-2012-464683

Advisory PublishedCVSS 6.8/10

Vulnetix · Advisory published May 21, 2012

Xelex Technologies' MobileTrack application has been reported to not verify the source of administrative SMS commands. An unauthenticated remote attacker can send commands over SMS to MobileTrack. User data is also exposed on an insecure FTP server account.

Download JSON Open in Console

Risk Scores

CVSS 2.0

6.8/10

Medium · AV:N/AC:M/Au:N/C:P/I:P/A:P

certcc-cam

impact0population0exploitation0widely_known0score_current0ease_of_exploitation0

certcc-vrda

d1_impact3d1_population2d1_direct_report1

certcc-cvss-temporal-env

temporal_score5.5remediation_levelUreport_confidenceURenvironmental_score1.37725905834891target_distributionLenvironmental_vectorCDP:ND/TD:L/CR:ND/IR:ND/AR:ND