Security Advisory

CVE-2016-1520

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-04-21 20:00:00

Last updated 2024-08-05 23:02:11

Assigner certcc

CVSS score not scored

State PUBLISHED

Description

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted application.

← Browse all CVEs View on cve.org ↗