CVE-2017-12697

A Man-in-the-Middle issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server...

PT-2018-5440

Name of the Vulnerable Software and Affected Versions: General Motors GM and Shanghai OnStar SOS SOS iOS Client version 7.1 Description: An issue with improper authentication was found, which could allow an attacker to bypass security measures and reset a user's account password. Recommendations:...

CVE-2017-12695: Improper Authentication

An Improper Authentication issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password...

PT-2018-5441

Name of the Vulnerable Software and Affected Versions: SOS iOS Client version 7.1 Description: A Man-in-the-Middle issue was discovered, which may allow an attacker to intercept sensitive information when the client connects to the server. Recommendations: For SOS iOS Client version 7.1, at the...

PT-2018-8520

Name of the Vulnerable Software and Affected Versions Shanghai OnStar SOS SOS iOS Client version 7.1 Description A Cleartext Storage of Sensitive Information issue was discovered, which may allow a remote attacker to access an encryption key stored in cleartext in memory. Recommendations For...

CVE-2017-9663: Cleartext Storage of Sensitive Information

An Cleartext Storage of Sensitive Information issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow a remote attacker to access an encryption key that is stored in cleartext in memory...

CVE-2017-12697: Channel Accessible by Non-Endpoint

A Man-in-the-Middle issue was discovered in General Motors GM and Shanghai OnStar SOS SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server...

General Motors and Shanghai OnStar (SOS) iOS Client

CVSS v3 9.8 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: General Motors GM, Shanghai OnStar SOS Equipment: SOS iOS Client Vulnerabilities: Cleartext Storage of Sensitive Information, Man-in-the-Middle, Improper Authentication REPOSTED INFORMATION This advisory was originall...