CVE

Id
55805  
CVE No.
CVE-2012-2562  
Status
Candidate  
Description
The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.  
Phase
Assigned (20120509)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
580914 55805 CVE-2012-2562 MISC:http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/  View
580915 55805 CVE-2012-2562 CERT-VN:VU#464683  View
580916 55805 CVE-2012-2562 URL:http://www.kb.cert.org/vuls/id/464683  View
580917 55805 CVE-2012-2562 BID:53634  View
580918 55805 CVE-2012-2562 URL:http://www.securityfocus.com/bid/53634  View
580919 55805 CVE-2012-2562 SECUNIA:49268  View
580920 55805 CVE-2012-2562 URL:http://secunia.com/advisories/49268  View
580921 55805 CVE-2012-2562 XF:mobiletrack-sms-commands-sec-bypass(75782)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
26769 JVNDB-2012-002476 Android 用の Xelex MobileTrack アプリケーションにおける重要な情報を取得される脆弱性 Android 用の Xelex MobileTrack アプリケーションは、ハードコードされた資格情報を使用するため、重要な情報を取得される脆弱性があります。 CVE-2012-2567 55805 2.6 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-002476.html  View