CVE-2014-6636 in LG Telepresence
Zusammenfassung (Englisch)
The LG Telepresence (aka com.rsupport.rtc.lge) application 2.0.12 Build 63 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
19.09.2014
Veröffentlichung
22.09.2014
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 71425 | rsupport LG Telepresence X.509 Certificate schwache Verschlüsselung | 310 | Nicht definiert | Nicht definiert | CVE-2014-6636 |