CVE-2012-2567

Published: May 22, 2012Modified: Apr 29, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

The Xelex MobileTrack application 2.3.7 and earlier for Android uses hardcoded credentials, which allows remote attackers to obtain sensitive information via an unencrypted (1) FTP or (2) HTTP session.

Affected (1)

Products: Xelex: Mobiletrack

Xelex

1 product

Mobiletrack

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Xelex Mobiletrack	Up to 2.3.7

Running on/with	Platform Versions
Google Android	All versions

Related CWEs

CWE-255

References (10)

http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/

Source: cret@cert.org

http://secunia.com/advisories/49268

Source: cret@cert.org

http://www.kb.cert.org/vuls/id/464683

Source: cret@cert.org

US Government Resource

http://www.securityfocus.com/bid/53634

Source: cret@cert.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/75783

Source: cret@cert.org

http://blog.mobiledefense.com/2012/05/mobile-defense-finds-two-security-vulnerabilities-in-xelex-mobiletrack/