CoreCVE
Back

MEDIUM

The SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability" diagnosis result transmission application 1.2.2 and earlier for Android allow man-in-the-middle attackers to spoof servers and obtain sensitive information by leveraging failure to verify SSL/TLS server certificates

Published Oct 18, 2017

Description

The SumaHo application 3.0.0 and earlier for Android and the SumaHo "driving capability" diagnosis result transmission application 1.2.2 and earlier for Android allow man-in-the-middle attackers to spoof servers and obtain sensitive information by leveraging failure to verify SSL/TLS server certificates.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner jpcert
Published Oct 18, 2017
Updated Aug 6, 2024
Reserved Sep 30, 2014
Link CVE-2014-7242
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2014-7242
Red Hat
Severity n/a
Public date n/a
Links CVE-2014-7242