VULNERABILITY INTELLIGENCE

CVE-2017-11130

CVSS score8.1 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2017-08-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in heinekingmedia StashCat through 1.7.5 for Android, through 0.0.80w for Web, and through 0.0.86 for Desktop. The product's protocol only tries to ensure confidentiality. In the whole protocol, no integrity or authenticity checks are done. Therefore man-in-the-middle attackers can conduct replay attacks.

Weakness classification

  • CWE-345: Insufficient Verification of Data Authenticity

Primary references