Design/Logic Flaw

2017-10-2917:29:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON

In the “NQ Contacts Backup & Restore” application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network.

CPENameOperatorVersion
contacts_backup_\\&_restoreeq1.1

CPE	Name	Operator	Version
	contacts_backup_\\&_restore	eq	1.1

References

1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html