VULNERABILITY INTELLIGENCE

CVE-2016-1520

CVSS score7.8 HIGH
EPSS probability2.16%
CISA KEVNot currently listed
Published2017-04-21
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.

Primary references