CVE-2017-2278

2017-08-0216:00:00

jpcert

www.cve.org

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.9%

JSON

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

CNA Affected

[
  {
    "product": "RBB SPEED TEST App for Android",
    "vendor": "IID, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "version 2.0.3 and earlier"
      }
    ]
  },
  {
    "product": "RBB SPEED TEST App for iOS",
    "vendor": "IID, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "version 2.1.0 and earlier"
      }
    ]
  }
]