CVE-2017-12697 - A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1

Back Back to CVE browser

MEDIUM

A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1

Published Jan 9, 2018

5.9

MEDIUM

CVSS 3.0

EPSS 1.44%

Description

A Man-in-the-Middle issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow an attacker to intercept sensitive information when the client connects to the server.

Affected products

Vendor n/a Product General Motors and Shanghai OnStar (SOS) iOS Client Default
n/a
- Version
  General Motors and Shanghai OnStar (SOS) iOS Client
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

General Motors and Shanghai OnStar (SOS) iOS Client

n/a

Version	Status	Constraints
General Motors and Shanghai OnStar (SOS) iOS Client	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-200

Exposure of Sensitive Information

CWE-300

References (2)

http://www.securityfocus.com/bid/102481
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04
x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/102481		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04		x_refsource_MISCMitigationThird Party AdvisoryUS Government Resource