CVE-2017-2278

The RBB SPEED TEST App for Android version 2.0.3 and earlier, RBB SPEED TEST App for iOS version 2.1.0 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

Score

CVSS 3.0 5.9 Medium

Status

Modified - vultures@jpcert.or.jp

Published

2017-08-02

Last modified

2024-08-05

Weaknesses

CWE-295

Affected products

• Rbb Speed Test (Iid)
• Rbb Speed Test App For Android (Iid Inc.)
• Rbb Speed Test App For Ios (Iid Inc.)

References

• http://www.iid.co.jp/information/170714.html
• https://jvn.jp/en/jp/JVN24238648/index.html