← Back

CVE-2017-2278

nvd nist
Published: Aug 2, 2017Modified: May 13, 2026

JSON object

Loading...
5.9
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Exploitability: 2.2 / Impact: 3.6
Source: NVD

Description

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Affected (1)

Products: Iid: Rbb Speed Test
Iid
1 product
Rbb Speed Test
Configuration A
1 platform
Running on/withPlatform Versions
Google
Android
Up to 2.0.3
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Rbb Speed Test
All versions
Running on/withPlatform Versions
Apple
Iphone Os
Up to 2.1

Related CWEs

CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.

References (4)

Source: vultures@jpcert.or.jp
Broken LinkThird Party Advisory
Source: vultures@jpcert.or.jp
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry

Timeline

No history available yet.