CVE-2016-1520

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers…

published April 21, 2017

CVSS
—
EPSS
2%
Percentile
82.0
In the wild
Unconfirmed
What it is

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02161 · 82.0th percentile
Published
2017-04-21T20:00Z
EPSS history
Timeline
  • 21 APR 20:00Z
    The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers…
    cvelistv5