Vulnerability Description
A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Gm | Shanghai Onstar | 7.1 |
Related Weaknesses (CWE)
References
- http://www.securityfocus.com/bid/102481Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04MitigationThird Party AdvisoryUS Government Resource
- http://www.securityfocus.com/bid/102481Third Party AdvisoryVDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04MitigationThird Party AdvisoryUS Government Resource
FAQ
What is CVE-2017-12697?
CVE-2017-12697 is a vulnerability with a CVSS score of 5.9 (MEDIUM). A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive...
How severe is CVE-2017-12697?
CVE-2017-12697 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2017-12697?
Check the references section above for vendor advisories and patch information. Affected products include: Gm Shanghai Onstar.