CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

CVE-2024-39771

CVE-2024-39771 affects Safie QBiC CLOUD CC-2L (v1.1.30 and earlier) and Safie One (v1.8.2 and earlier). The root cause is improper certificate validation, which can allow a network-adjacent, unauthenticated attacker to perform a man‑in‑the‑middle and either obtain or alter communications of the a...

CVE-2024-39771

QBiC CLOUD CC-2L v1.1.30 and earlier and Safie One v1.8.2 and earlier do not properly validate certificates, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter communications of the affected product via a man-in-the-middle attack...

PT-2024-28667 · Qbic · Qbic Cloud Cc-2L

Name of the Vulnerable Software and Affected Versions: QBiC CLOUD CC-2L versions 1.1.30 and earlier Safie One versions 1.8.2 and earlier Description: The issue is related to improper certificate validation, which may allow a network-adjacent unauthenticated attacker to obtain and/or alter...

JVN#83440451: Multiple Safie products vulnerable to improper server certificate verification

Multiple Safie products are vulnerable to improper server certificate verification CWE-295. The product can be operated via port 11029/TCP and Bluetooth, and its communications are AES encrypted. The product user can obtain the encryption key from the cloud server based on the device-specific...