CVE-2014-7242

Published: Oct 18, 2017Modified: May 13, 2026

5.9

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

The SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability" diagnosis result transmission application 1.2.2 and earlier for Android allow man-in-the-middle attackers to spoof servers and obtain sensitive information by leveraging failure to verify SSL/TLS server certificates.

Affected (2)

Products: Ms Ins: Sumaho, Sumaho Driving Capability Diagnosis

2 products

Sumaho Driving Capability Diagnosis

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ms Ins Sumaho	Up to 3.0.0
Ms Ins Sumaho Driving Capability Diagnosis	Up to 1.2.2

Related CWEs

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (4)

http://jvn.jp/en/jp/JVN27388160/index.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000125.html

Source: vultures@jpcert.or.jp

Third Party AdvisoryVDB Entry

http://jvn.jp/en/jp/JVN27388160/index.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000125.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.