PT-2023-11483 · Uffizio · Uffizio'S Gps Tracker

Published 2023-12-16 · Updated 2023-12-20 · CVE-2020-17485

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Uffizio's GPS Tracker all versions

Description A Remote Code Execution issue exists, allowing the web server to be compromised by uploading and executing a web/reverse shell. This enables an attacker to run commands, browse system files, and access local resources.

Recommendations For all versions, consider disabling the web server functionality or restricting access to it until a fix is available. As a temporary workaround, restrict the ability to upload files to the web server to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-17485

Affected Products

Uffizio'S Gps Tracker

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-17485 · Security Note
• https://cisa.gov/news-events/ics-advisories/icsa-21-287-02 · Note
• https://uffizio.com · Note
• https://twitter.com/CVEnew/status/1735946007962337467 · Twitter Post