CVE-2017-15998

In the "NQ Contacts Backup & Restore" application 1.1 for Android, DES encryption with a static key is used to secure transmitted contact data. This makes it easier for remote attackers to obtain cleartext information by sniffing the network.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-10-29

Last modified

2024-09-17

Weaknesses

CWE-327

Affected products

• Contacts Backup & Restore (Nq)

References

• https://1337sec.blogspot.de/2017/10/auditing-nq-contacts-backup-restore-11.html