← CVE Intelligence

CVE-2022-34150

ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key PUBLISHED

Description (CNA)

The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerability on endpoint and parameter device IDs, which accept arbitrary device IDs without further verification.

Affected (CNA)

Vendor / productVersions
MiCODUS / MV720affected All versions

CWE

CWE-639

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.