Filtered by vendor Xelex Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2012-2567 2 Google, Xelex 2 Android, Mobiletrack 2024-11-21 N/A
The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
CVE-2012-2562 2 Google, Xelex 2 Android, Mobiletrack 2024-11-21 N/A
The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.