Xelex MobileTrack 2.3.7

CPE Details

Xelex MobileTrack 2.3.7
xelex
mobiletrack
2.3.7
2012-05-22
18h04 +00:00
2012-05-30
18h55 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:xelex:mobiletrack:2.3.7:*:*:*:*:*:*:*

Informations

Vendor

xelex

Product

mobiletrack

Version

2.3.7

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2012-2562 2012-05-22 13h00 +00:00 The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.
7.6
CVE-2012-2567 2012-05-22 13h00 +00:00 The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
2.6