The Xelex MobileTrack application 2.3.7 and earlier for Android does not verify the origin of SMS commands, which allows remote attackers to execute a (1) LOCATE, (2) TRACK, (3) UPDATECFG, (4). Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.
Information Disclosure
Google
Mobiletrack
NVD
CVSS 2.0
7.6
EPSS
4.2%