CVE-2017-9663

An Cleartext Storage of Sensitive Information issue was discovered in General Motors (GM) and Shanghai OnStar (SOS) SOS iOS Client 7.1. Successful exploitation of this vulnerability may allow a remote attacker to access an encryption key that is stored in cleartext in memory.

Score

CVSS 3.0 7.5 High

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-01-09

Last modified

2024-08-05

Weaknesses

CWE-312

Affected products

• Shanghai Onstar (Gm)

References

• http://www.securityfocus.com/bid/102481
• https://ics-cert.us-cert.gov/advisories/ICSA-17-234-04