CVE-2023-33757

2024-01-2500:00:00

mitre

www.cve.org

ssl certificate validation

splicecom ipcs

ios app

android app

man-in-the-middle attack

cve-2023-33757

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

24.2%

JSON

A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack.

References

github.com/twignet/splicecom