Uffizio

    Dashboard / Vendors

    Products: 1
    Vulnerabilities: 5
    Known Exploited: 0
    1
    Critical Level Threats
    2
    High Level Threats
    2
    Medium Level Threats
    0
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2020-17485

    A Remote Code Execution vulnerability exist in Uffizio's GPS Tracker all versions. The web server can be compromised by uploading and executing a web/reverse shell. An attacker could then run commands, browse system files, and browse local resources

    Last Modified: Nov 21, 2024
    Published: Dec 16, 2023

    CVE-2020-17483

    An improper access control vulnerability exists in Uffizio's GPS Tracker all versions that lead to sensitive information disclosure of all the connected devices. By visiting the vulnerable host at port 9000, we see it responds with a JSON body that has all the details about the devices which have been deployed.

    Last Modified: Nov 21, 2024
    Published: Dec 16, 2023

    CVE-2020-17484

    An Open Redirection vulnerability exists in Uffizio's GPS Tracker all versions allows an attacker to construct a URL within the application that causes a redirection to an arbitrary external domain.

    Last Modified: Nov 21, 2024
    Published: Dec 16, 2023

    CVE-2021-32927

    Uffizio GPS Tracker Cross-site Scripting

    Last Modified: Apr 16, 2025
    Published: Apr 22, 2022

    CVE-2021-32929

    Uffizio GPS Tracker Cross-site Request Forgery

    Last Modified: Apr 16, 2025
    Published: Apr 22, 2022
    Items Per Page