Grandstream Wave Update Redirection Vulnerability

Grandstream Wave is a suite of free VoIP applications. Grandstream Wave uses an insecure connection to download update information, which can be exploited by an attacker to perform a redirection attack and trick users into downloading a malicious update package...

Grandstream Wave Redirection Vulnerability

Grandstream Wave is a suite of free VoIP applications. Grandstream Wave uses an insecure connection to obtain a configuration file, which allows an attacker to impersonate a configuration server with invalid, mismatched, or expired certificates, redirect phone calls, or cause dialed calls to...

Grandstream Wave Redirection Vulnerability

Grandstream Wave is a free VoIP application from Grandstream. The application supports multiple accounts, simultaneous use of multiple lines, and more. A redirection vulnerability exists in Grandstream Wave version 1.0.1.26, which originates when the program uses an unsecured connection to downlo...

Grandstream Wave 1.0.1.26 Update Redirection

CVE-2016-1520: GrandStream Android VoIP App Update Redirection ============================================================== Affected app: Grandstream WaveGSWAVE version 1.0.1.26 and probably earlier Classification: CWE-300 Channel Accessible by Non-EndpointCWE300 CWE-319 Cleartext Transmission ...