CVE-2017-2278 The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle a...
MediumCVSS 5.9
EPSS 0.63%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| iid rbb speed test | All versions | No fix listed |
| iid RBB SPEED TEST App for Android | = version 2.0.3 and earlier | No fix listed |
| iid RBB SPEED TEST App for iOS | = version 2.1.0 and earlier | No fix listed |
References
- www.iid.co.jp broken-link third-party-advisory
- JVN#24238648 third-party-advisory vdb-entry