PatchTheCVEmv720 firmware vulnerabilities and fixes
Recent CVEs affecting mv720 firmware, with upgrade or downgrade steps. 5 tracked.
Also searched as: mv720firmware.
mv720 firmware has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-07-20. Highest priority: CVE-2022-2141 (score 57/100).
- CVE-2022-34150 HIGH 7.1 MITIGATE The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerabil
- CVE-2022-33944 MEDIUM 6.5 MITIGATE The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerabi
- CVE-2022-2199 HIGH 7.5 MITIGATE The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could al
- CVE-2022-2141 CRITICAL 9.8 MITIGATE SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.
- CVE-2022-2107 CRITICAL 9.8 MITIGATE The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-cod
FAQ
How do I fix mv720 firmware vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is mv720 firmware being exploited right now?
None of the tracked mv720 firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which mv720 firmware CVE should I patch first?
CVE-2022-2141 currently ranks highest (57/100): SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication..