CVE-2017-12697 A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive...
MediumCVSS 5.9
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gm shanghai onstar | = 7.1 | No fix listed |
References
- 102481 third-party-advisory vdb-entry
- ics-cert.us-cert.gov mitigation third-party-advisory us-government-resource