PatchTheCVEmicodus vulnerabilities
Recent CVEs affecting micodus products. 5 tracked.
micodus has 5 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-07-20. Highest priority: CVE-2022-2141 (score 57/100).
- CVE-2022-34150 HIGH 7.1 MITIGATE The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object reference vulnerabil
- CVE-2022-33944 MEDIUM 6.5 MITIGATE The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerabi
- CVE-2022-2199 HIGH 7.5 MITIGATE The main MiCODUS MV720 GPS tracker web server has a reflected cross-site scripting vulnerability that could al
- CVE-2022-2141 CRITICAL 9.8 MITIGATE SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.
- CVE-2022-2107 CRITICAL 9.8 MITIGATE The MiCODUS MV720 GPS tracker API server has an authentication mechanism that allows devices to use a hard-cod
FAQ
How do I fix micodus vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is micodus being exploited right now?
None of the tracked micodus CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which micodus CVE should I patch first?
CVE-2022-2141 currently ranks highest (57/100): SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication..