TI-2020-13242 CVE-2020-17485 · GHSA-vxm8-rc98-qx4f
A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions.
Priority MEDIUM 46
A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions.
Uffizio
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
Uffizio records in CISA KEVNo Uffizio vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records in Gps Tracker · all components
TI-2021-12538 CVE-2021-32929 · GHSA-5p79-2m8g-gf5w
Uffizio GPS Tracker Cross-site Request Forgery
Priority LOW 38
All versions of Uffizio GPS Tracker may allow an attacker to perform unintended actions on behalf of a user.
TI-2020-13240 CVE-2020-17483 · GHSA-jj8x-8hrh-x979
An improper access control vulnerability exists in Uffizio's GPS Tracker all versions…
Priority LOW 34
An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices.
TI-2021-12536 CVE-2021-32927 · GHSA-j7v7-w8h2-j5q7
Uffizio GPS Tracker Cross-site Scripting
Priority LOW 32
An attacker may be able to inject client-side JavaScript code on multiple instances within all versions of Uffizio GPS Tracker.
TI-2020-13241 CVE-2020-17484 · GHSA-xhj8-r9jm-ff9x
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an…
Priority LOW 28
An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.