CVE-2016-1519

The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows…

published April 21, 2017

CVSS
—
EPSS
1%
Percentile
61.1
In the wild
Unconfirmed
What it is

The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows man-in-the-middle attackers to spoof the Grandstream provisioning server via a crafted certificate.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00959 · 61.1th percentile
Published
2017-04-21T20:00Z
EPSS history
Timeline
  • 21 APR 20:00Z
    The com.softphone.common package in the Grandstream Wave app 1.0.1.26 and earlier for Android does not properly validate SSL certificates, which allows…
    cvelistv5