High severity7.5NVD Advisory· Published Mar 27, 2017· Updated Jun 17, 2026

CVE-2017-5237

Description

Due to a lack of authentication, an unauthenticated user who knows the Eview EV-07S GPS Tracker's phone number can revert the device to a factory default configuration with an SMS command, "RESET!"

Affected products

Eviewgps/Ev 07s Gps Tracker Firmware2 versions
cpe:2.3:o:eviewgps:ev-07s_gps_tracker_firmware:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:eviewgps:ev-07s_gps_tracker_firmware:-:*:*:*:*:*:*:*
- (no CPE)
Eview/EV-07S GPS Trackerv5
Range: All

Patches

Vulnerability mechanics

References

community.rapid7.com/community/infosec/blog/2017/03/27/r7-2015-28-multiple-eview-ev-07s-gps-tracker-vulnerabilitiesnvdThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/97186nvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000