CVE Database
/

CVE-2017-2278

Back to search

CVE-2017-2278

Published: Aug 2, 2017

Modified: Aug 5, 2024

PUBLISHED

Description

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

VendorProductVersions

IID, Inc.

RBB SPEED TEST App for Android

affected
version 2.0.3 and earlier

IID, Inc.

RBB SPEED TEST App for iOS

affected
version 2.1.0 and earlier

References

JVN#24238648
third-party-advisory
x_refsource_JVN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now