juiker vulnerabilities

Products

• juiker 3
• Juiker app 2

Latest juiker CVEs

Newest publication first

1. CVE-2022-39043 Juiker app - Information Leakage

   Published 2023-03-27

   Low·CVSS 2.4 EPSS 0.26%

   Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to acquire partial user information such as personal contacts.

2. CVE-2022-38117 Juiker app - Hard-coded Credentials

   Published 2022-10-24

   Medium·CVSS 6.1 EPSS 0.30%

   Juiker app hard-coded its AES key in the source code. A physical attacker, after getting the Android root privilege, can use the AES key to decrypt users’ ciphertext and tamper with it.

3. CVE-2014-6693 The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informa...

   Published 2014-09-24

   Medium·CVSS 5.4 EPSS 0.30%

   The Juiker (aka org.itri) application 3.2.0829.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.