Vulnerability Description
An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have been deployed.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Uffizio | Gps Tracker | All versions |
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02Third Party AdvisoryUS Government Resource
- https://www.uffizio.com/Product
- https://www.cisa.gov/news-events/ics-advisories/icsa-21-287-02Third Party AdvisoryUS Government Resource
- https://www.uffizio.com/Product
FAQ
What is CVE-2020-17483?
CVE-2020-17483 is a vulnerability with a CVSS score of 7.5 (HIGH). An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at por...
How severe is CVE-2020-17483?
CVE-2020-17483 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-17483?
Check the references section above for vendor advisories and patch information. Affected products include: Uffizio Gps Tracker.