A lack of SSL certificate validation in Splicecom iPCS (iOS App) v1.3.4, iPCS2 (iOS App) v2.8 and before, and iPCS (Android App) v1.8.5 and before allows attackers to eavesdrop on communications via a man-in-the-middle attack.
References
| Link | Resource |
|---|---|
| https://github.com/twignet/splicecom | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
31 Jan 2024, 20:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.9 |
| References | () https://github.com/twignet/splicecom - Exploit, Third Party Advisory | |
| First Time |
Splicecom
Splicecom ipcs Splicecom ipcs2 |
|
| CPE | cpe:2.3:a:splicecom:ipcs2:*:*:*:*:*:iphone_os:*:* cpe:2.3:a:splicecom:ipcs:*:*:*:*:*:android:*:* cpe:2.3:a:splicecom:ipcs:1.3.4:*:*:*:*:iphone_os:*:* |
|
| CWE | CWE-295 |
25 Jan 2024, 13:38
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
25 Jan 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-01-25 08:15
Updated : 2024-01-31 20:38
NVD link : CVE-2023-33757
Mitre link : CVE-2023-33757
CVE.ORG link : CVE-2023-33757
JSON object : View
Products Affected
splicecom
- ipcs
- ipcs2
CWE
CWE-295
Improper Certificate Validation