Vulnerability Details : CVE-2020-17483
An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have been deployed.
Products affected by CVE-2020-17483
- cpe:2.3:a:uffizio:gps_tracker:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-17483
0.11%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 27 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2020-17483
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
3.9
|
3.6
|
NIST |
References for CVE-2020-17483
-
https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02
Uffizio GPS Tracker | CISAThird Party Advisory;US Government Resource
-
https://www.uffizio.com/
GPS Tracking Software | White Label GPS Tracking SoftwareProduct
Jump to