CVE-2022-2141

—

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

Jul 20, 2022 (Jul 20, 2022)

Modified

Jun 17, 2026

Description

SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.

Vendors: micodus
Products: mv720 firmware
Weakness: CWE-287, CWE-306
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news4 stories

Unpatched flaws in popular GPS devices could let hackers disrupt and track vehicles

The RecordJan 11, 00:00 UTC · Jan 11, 2023Vulnerability CVE-2022-2107 CVE-2022-2141

60

Unpatched Flaws in Popular GPS Devices Allow Adversaries to Disrupt and Track Vehicles

Infosecurity MagazineJul 20, 18:48 UTC · Jul 20, 2022Vulnerability CVE-2022-2107 CVE-2022-2141 CVE-2022-2199+2 CVEs

60

Million of vehicles can be hit via MiCODUS MV720 GPS Tracker

Security AffairsJul 20, 14:53 UTC · Jul 20, 2022Vulnerability CVE-2022-2107 CVE-2022-2141 CVE-2022-2199+2 CVEs

60

Unpatched GPS Tracker Bugs Could Let Attackers Disrupt Vehicles Remotely

The Hacker NewsJul 20, 09:44 UTC · Jul 20, 2022Vulnerability CVE-2022-2107 CVE-2022-2141 CVE-2022-2199+2 CVEs

60