PT-2017-15318 · Rbb · Rbb Speed Test App For Ios+1

Digignome · Published 2017-08-02 · Updated 2017-08-04 · CVE-2017-2278

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions RBB SPEED TEST App for Android versions 2.0.3 and earlier RBB SPEED TEST App for iOS versions 2.1.0 and earlier

Description The issue concerns the failure to verify X.509 certificates from SSL servers, allowing man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Recommendations For RBB SPEED TEST App for Android versions 2.0.3 and earlier, update to a version that properly verifies X.509 certificates. For RBB SPEED TEST App for iOS versions 2.1.0 and earlier, update to a version that properly verifies X.509 certificates. As a temporary workaround, consider disabling the use of SSL connections in the app until a patch is available.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2017-2278

Affected Products

Rbb Speed Test App For Android

Rbb Speed Test App For Ios

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2017-2278 · Security Note
• http://iid.co.jp/information/170714.html · Note
• https://jvn.jp/en/jp/JVN24238648/index.html · Note