Wave@* Security Vulnerabilities and Issues — Wave@* CVE List

Lucene search

GrandstreamWave*

3 matches found

CVE•added 2017/04/21 8:59 p.m.•36 views

CVE-2016-1518

The auto-provisioning mechanism in the Grandstream Wave app 1.0.1.26 and earlier for Android and Grandstream Video IP phones allows man-in-the-middle attackers to spoof provisioning data and consequently modify device functionality, obtain sensitive information from system logs, and have unspecifie...

8.1CVSS7.9AI score0.00849EPSS

CVE•added 2017/04/21 8:59 p.m.•30 views

CVE-2016-1520

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.

7.8CVSS7.7AI score0.0027EPSS

CVE•added 2017/04/21 8:59 p.m.•26 views

CVE-2016-1519

The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.

5.9CVSS5.4AI score0.00233EPSS