SMS-based GPS commands can be executed by MiCODUS MV720 GPS tracker without authentication.
CWE-287, CWE-306