EUVD-2014-7293

Malware in sbrugna...

CVE-2014-7422

The HEA Mobile aka com.homerelectric.smartapps application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The HEA Mobile aka com.homerelectric.smartapps application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7422

The HEA Mobile aka com.homerelectric.smartapps application 1.153.0034 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7422

The CVE records that the HEA Mobile Android app (com.homerelectric.smartapps) version 1.153.0034 does not verify X.509 certificates on SSL connections, causing potential MITM to spoof servers and steal sensitive data via crafted certificates. Root cause: missing server trust verification in the a...