Vendor
MiCODUS
5 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 6.5
ICSA-22-200-01 MiCODUS MV720 GPS tracker Authorization Bypass Through User-Controlled Key
The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter “Device ID,” which accepts arbitrary device IDs.