CVE-2012-2567

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
2.6 UNKNOWN
NETWORK
HIGH
AV:N/AC:H/Au:N/C:P/I:N/A:N
certccCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 69%
VendorProductVersion
xelexmobiletrack
𝑥
≤ 2.3.7
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/
http://secunia.com/advisories/49268
http://www.kb.cert.org/vuls/id/464683
http://www.securityfocus.com/bid/53634
https://exchange.xforce.ibmcloud.com/vulnerabilities/75783
http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/
http://secunia.com/advisories/49268
http://www.kb.cert.org/vuls/id/464683
http://www.securityfocus.com/bid/53634
https://exchange.xforce.ibmcloud.com/vulnerabilities/75783