CVE-2023-33757

Published: Jan 25, 2024Modified: Jun 17, 2026

5.9

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.2 / Impact: 3.6

Source: NVD

Description

A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack.

Affected (3)

Products: Splicecom: Ipcs, Ipcs2

Splicecom

2 products

Ipcs

Ipcs2

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Splicecom Ipcs	Up to 1.8.5
Splicecom Ipcs	Version 1.3.4
Splicecom Ipcs2	Up to 2.8

Related CWEs

CWE-295

Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.

References (2)

https://github.com/twignet/splicecom

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/twignet/splicecom

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.