CVE-2017-12695CWE-287

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1

published January 9, 2018

CVSS
—
EPSS
2%
Percentile
79.0
In the wild
Unconfirmed
What it is

An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to subvert security mechanisms and reset a user account password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01852 · 79.0th percentile
Weakness
CWE-287 · Improper Authentication
Published
2018-01-09T21:00Z
EPSS history
Timeline
  • 09 JAN 21:00Z
    An Improper Authentication issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1
    cvelistv5