CVE-2014-5704
Advisory lineage Upstream: 0 Downstream: 1
Downstream
Modified
Published: 09 Sept 2014, 10:00
Last modified:06 Aug 2024, 11:55
Vulnerability Summary
Overall Risk (default)
low
22/100 CVSS Score
5.4 MEDIUM
v2.0 (nvd)
EPSS Score
0.05% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Sept 2014, 10:00
Published
Vulnerability first disclosed
06 Aug 2024, 11:55
Last Modified
Vulnerability information updated
Description
The DISH Anywhere (aka com.sm.SlingGuide.Dish) application 3.5.10 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Metrics
- v2.0•MEDIUM•Score: 5.4AV:A/AC:M/Au:N/C:P/I:P/A:P
EPSS Trends
Current EPSS score: 0.05%• Percentile: 16%
Techniques & Countermeasures
- CWE-310•Cryptographic Issues
Weaknesses in this category are related to the design and implementation of data confidentiality and integrity. Frequently these deal with the use of encoding techniques, encryption libraries, and hashing algorithms. The weaknesses in this category could lead to a degradation of the quality data if they are not addressed.
Affected Systems
- dish•dish_anywhere
3.5.10