Skip to content
OpenAdvisories
Critical ICSA-21-287-02 5 CVEs

Uffizio GPS Tracker

Published Oct 14, 2021 · Updated Oct 14, 2021

Vendor: Uffizio Product: GPS Tracker

Summary

Successful exploitation of these vulnerabilities could allow an attacker with access to the host to view sensitive information, gain code execution, cause a redirection to an arbitrary external domain, and perform actions on behalf of an unsuspecting user.

Vulnerabilities 5

  • High 7.1
    CVE-2021-32927

    Uffizio GPS Tracker Cross-site Scripting

    An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker.

    Uffizio GPS Tracker
  • Medium 4.3
    CVE-2021-32929

    Uffizio GPS Tracker Cross-site Request Forgery

    All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user.

    Uffizio GPS Tracker
  • Unscored —
    CVE-2020-17483

    An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive informatio…

  • Unscored —
    CVE-2020-17484

    An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL wi…

  • Unscored —
    CVE-2020-17485

    A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by…

Revision history

  1. #1

    ICSA-21-287-02 Uffizio GPS Tracker

References