CVE-2015-1598

The CVE-2015-1598 entry corresponds to the Siemens SPCanywhere mobile app where passwords are stored in a recoverable format, enabling physically proximate attackers with access to the device to obtain credentials. Public documents describe this as a local information-disclosure weakness (unprote...

CVE-2015-1596

The Siemens SPCanywhere application for Android and iOS does not properly verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2015-1597

The Siemens SPCanywhere application for Android does not use encryption during the loading of code, which allows man-in-the-middle attackers to execute arbitrary code by modifying the client-server data stream...

CVE-2015-1596

The CVE-2015-1596 vulnerability affects Siemens SPCanywhere Android and iOS apps, caused by improper SSL certificate validation (unverified X.509 certificates), enabling MITM impersonation and data exposure. Affected: SPCanywhere mobile apps; root cause: failure to properly verify SSL certificate...

CVE-2015-1599

The Siemens SPCanywhere application for iOS allows physically proximate attackers to bypass intended access restrictions by leveraging a filesystem architectural error...

CVE-2015-1595

The Siemens SPCanywhere application for Android and iOS does not use encryption during lookups of system ID to IP address mappings, which allows man-in-the-middle attackers to discover alarm IP addresses and spoof servers by intercepting the client-server data stream...

CVE-2015-1597

CVE-2015-1597 concerns the SPCanywhere Android app, where loading code occurs without encryption. The documented risk is that a man-in-the-middle could modify the client–server data stream to execute arbitrary code on the device. Affected component is the SPCanywhere Android application (and ment...

CVE-2015-1598

The Siemens SPCanywhere application for Android does not properly store application passwords, which allows physically proximate attackers to obtain sensitive information by examining the device filesystem...