CVE-2017-15998

2022-10-0316:23:33

mitre

www.cve.org

android

network sniffing

contact data transmission

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON

In the “NQ Contacts Backup & Restore” application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network.

References

1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html