EUVD-2016-2613

Malware in sbrugna...

CVE-2016-1518

The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have...

CVE-2016-1520: Undefined Security Weakness

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application...

PT-2017-7963

Name of the Vulnerable Software and Affected Versions Grandstream Wave app versions 1.0.1.26 and earlier Description The issue concerns the Grandstream Wave app not using HTTPS when retrieving update information. This might allow man-in-the-middle attackers to execute arbitrary code via a crafted...

PT-2017-7962

Name of the Vulnerable Software and Affected Versions Grandstream Wave app version 1.0.1.26 and earlier Description The issue concerns the com.softphone.common package in the Grandstream Wave app, which fails to properly validate SSL certificates. This allows man-in-the-middle attackers to spoof...