Xelex

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xelex records in CISA KEV

No Xelex vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mobiletrack 2 records LOW

Records

2 records in Mobiletrack · all components

TI-2012-02221 CVE-2012-2562 · GHSA-582v-h4w6-q3j2

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the…

LOW 37

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) T…

CVSS 2.0HIGH 7.6 Network No auth Interaction — EPSS 0.02175 Published 2012-05-22 No fix listed CWE-20

TI-2012-02226 CVE-2012-2567 · GHSA-43rc-vwh5-26j7

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded…

LOW 16

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.01396 Published 2012-05-22 No fix listed CWE-255

Open these records in search →

Critical	0
High	1
Medium	0
Low	1
No CVSS	0