Vulnerabilities (CVE)

Filtered by vendor Xelex Subscribe
Filtered by product Mobiletrack
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2012-2567 2 Google, Xelex 2 Android, Mobiletrack 2023-12-10 2.6 LOW N/A
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
CVE-2012-2562 2 Google, Xelex 2 Android, Mobiletrack 2023-12-10 7.6 HIGH N/A
The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.