CVE-2017-13105 — MEDIUM (5.9)

Vulnerability Description

Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle attack having all of its encrypted traffic intercepted and read by an attacker.

CVSS Score

5.9

MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Hisecuritylab	Virus Cleaner	3.7.1.1329

Related Weaknesses (CWE)

CWE-295

References

https://www.kb.cert.org/vuls/id/787952Third Party AdvisoryUS Government Resource
https://www.kb.cert.org/vuls/id/787952Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2017-13105?

CVE-2017-13105 is a vulnerability with a CVSS score of 5.9 (MEDIUM). Hi Security Virus Cleaner - Antivirus, Booster, 3.7.1.1329, 2017-09-13, Android application accepts all SSL certificates during SSL communication. This opens the application up to a man-in-the-middle ...

How severe is CVE-2017-13105?

CVE-2017-13105 has been rated MEDIUM with a CVSS base score of 5.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-13105?

Check the references section above for vendor advisories and patch information. Affected products include: Hisecuritylab Virus Cleaner.