Code injection

2022-04-2221:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.8%

JSON

Versions of Motorola Ready For and Motorola Device Help Android applications prior to 2021-04-08 do not properly verify the server certificate which could lead to the communication channel being accessible by an attacker.

CPENameOperatorVersion
device_helpeq< 202148
ready_foreq< 202148

CPE	Name	Operator	Version
	device_help	eq	< 202148
	ready_for	eq	< 202148

References

support.lenovo.com/us/en/product_security/LEN-58311