← CVE Intelligence

CVE-2022-33944

ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key PUBLISHED

Description (CNA)

The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs.

Affected (CNA)

Vendor / productVersions
MiCODUS / MV720affected All versions

CWE

CWE-639

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.