CVE-2012-2562

HIGH 7.6CVE-2012-2562 · Published 22/05/2012 · updated 16/06/2026

In short

CVE-2012-2562 is a HIGH (CVSS 7.6) vulnerability affecting mobiletrack (xelex).
Chance of exploitation in the next 30 days (EPSS): 2.2%, higher than 82.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mobiletrack xelex	`≤ 2.3.7`	No fix yet

Description

The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4) UPDATEACCT, (5) STAT, (6) TERM, or (7) WIPE command via an SMS message.

References

blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack
secunia.com/advisories/49268
kb.cert.org/vuls/id/464683 · US Government Resource
securityfocus.com/bid/53634
exchange.xforce.ibmcloud.com/vulnerabilities/75782

More vulnerabilities in mobiletrack

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free