CVE-2017-2278 Vulnerability Details

  /     /     /  

CVE-2017-2278 Metadata Quick Info

CVE Published: 02/08/2017 | CVE Updated: 05/08/2024 | CVE Year: 2017
Source: jpcert | Vendor: IID, Inc. | Product: RBB SPEED TEST App for Android
Status : PUBLISHED

---

CVE-2017-2278 Description

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Fails to verify SSL certificates
Source: IID, Inc.

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).