VULNERABILITY INTELLIGENCE

CVE-2017-2278

CVSS score5.9 MEDIUM

EPSS probability0.63%

CISA KEVNot currently listed

Published2017-08-02

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Weakness classification

CWE-295: Improper Certificate Validation

Primary references

vultures@jpcert.or.jp — Broken Link, Third Party Advisory
vultures@jpcert.or.jp — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Broken Link, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry