| |
Vulnerability CVE-2022-33944
Published: 2022-07-20
| Description: |
The main MiCODUS MV720 GPS tracker web server has an authenticated insecure direct object references vulnerability on endpoint and POST parameter ??Device ID,? which accepts arbitrary device IDs. |
Type:
CWE-639 (Authorization Bypass Through User-Controlled Key)
References: |
https://www.cisa.gov/uscert/ics/advisories/icsa-22-200-01
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
